Orders from a Custom Marketplace

Overview

A Custom Marketplace connection has its own order address. Your website or marketplace sends each order there, signed with the connection's secret, and O2M saves it like any other order.

Address

Each Custom Marketplace connection has its own address, shown on its Orders tab in O2M. It needs no API key: the connection's signing secret (or its order key) proves the request is yours.

POST https://api.o2m.in/api/custom-marketplace/inbound/<connection>/orders

Sign each request

X-O2M-Timestamp: 1790000000
X-O2M-Signature: 5f2c9a…

1. 1Take the time in Unix seconds as the timestamp.
2. 2Join the timestamp, a full stop and the raw body you are about to send: timestamp.body.
3. 3Compute the HMAC-SHA256 of that text with the connection's signing secret, in hexadecimal. That is the signature.
4. 4Send both headers. O2M refuses a request whose timestamp is more than 5 minutes from its own clock.

import crypto from "node:crypto";

const body = JSON.stringify(order);
const timestamp = Math.floor(Date.now() / 1000).toString();
const signature = crypto.createHmac("sha256", process.env.O2M_SIGNING_SECRET).update(`${timestamp}.${body}`).digest("hex");

await fetch(process.env.O2M_ORDER_URL, {
  method: "POST",
  headers: { "Content-Type": "application/json", "X-O2M-Timestamp": timestamp, "X-O2M-Signature": signature },
  body,
});

Body

In O2M's order format, the body is the same as Create an order, without channel: the connection is the channel. If the connection reads your own format, send your order as it is; the connection's mapping finds each value.

{
  "order_id": "W-1001",
  "ordered_at": "2026-11-04T10:00:00+05:30",
  "payment_method": "prepaid",
  "customer": {
    "name": "Ravi",
    "email": "ravi@example.com"
  },
  "shipping_address": {
    "name": "Ravi",
    "phone": "9800000000",
    "address1": "1 MG Road",
    "city": "Pune",
    "state": "Maharashtra",
    "pincode": "411001"
  },
  "lines": [
    {
      "sku": "TEE-S",
      "quantity": 1,
      "unit_price": 499
    }
  ]
}

To cancel an order you sent before, send it again with "status": "cancelled" (in your own format, with a status value the connection lists as cancelled). It is cancelled only before it ships.

Answers

Errors