How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

xavio-in Orders API

List and read orders, move them through fulfilment, add tracking, confirm cash-on-delivery and issue refunds (refunds:write). Contact details only with customers:pii.

xavio-in Orders API is one of 9 APIs that xavio-in publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

This API exposes 6 JSON Schema definitions.

Tagged areas include Order. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

This API exposes 7 operations across 6 paths, and defines 12 schemas. It is described by OpenAPI 3.2.0, at version 1.0.0.

Requests are made against a single base URL, https://nafafy.com.

7 operations 6 paths 12 schemas 3 GET4 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0.0
Base URL
https://nafafy.com
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

xavio-in Orders API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (nf_live_<32-char> | nf_test_<64-char>) (bearerAuth). By default, every request must be authenticated.

Paths & Operations 7

Across 6 paths, the API surfaces 7 operations — 3 GET, 4 POST. Each is listed below with its method, path, parameters, and response codes.

Orders 7

List and read orders, move them through fulfilment, add tracking, confirm cash-on-delivery and issue refunds (refunds:write). Contact details only with customers:pii.

GET
/api/v1/orders
List your shop's orders
getApiV1Orders 5 params → 200401403429500
GET
/api/v1/orders/{id}
Get one order
getApiV1OrdersById 1 param → 200400401403404429500503
POST
/api/v1/orders/{id}/status
Move an order through fulfilment
postApiV1OrdersByIdStatus 2 params body → 200400401403404409429500
POST
/api/v1/orders/{id}/tracking
Add or correct tracking on a shipping order
postApiV1OrdersByIdTracking 1 param body → 200400401403404409429500
GET
/api/v1/orders/{id}/refunds
List an order's refunds
getApiV1OrdersByIdRefunds 1 param → 200400401403404429500503
POST
/api/v1/orders/{id}/refunds
Issue a refund
postApiV1OrdersByIdRefunds 2 params body → 200201400401403404409422
POST
/api/v1/orders/{id}/cod
Confirm or cancel a cash-on-delivery order
postApiV1OrdersByIdCod 2 params body → 200400401403404409429500

Schemas 12

The contract defines 12 schemas that model the data the API accepts and returns. The most detailed are Order (29 properties), OrderListItem (17 properties), OrderTransitionRequest (10 properties), OrderRefundRecord (8 properties). Each schema is shown below with its type and property counts.

OrderTransitionRequest
object
POST /api/v1/orders/{id}/status body. status must be one of packed | shipped | outfordelivery | delivered | cancelled (pending / paid are refused with badbody)…
10 properties 1 required
OrderCodRequest
object
POST /api/v1/orders/{id}/cod body: confirm after you have spoken to the buyer, or cancel an UNCONFIRMED cash-on-delivery order. A confirmed order is cancelled…
1 property 1 required
OrderTrackingRequest
object
POST /api/v1/orders/{id}/tracking body. Send at least one field; unknown fields are refused. Allowed only while the order is packed, shipped or out for deliver…
4 properties
CodConfirmation
object
4 properties 4 required
OrderRefund
OrderTracking
object
4 properties 4 required
OrderListItem
object
One row of GET /api/v1/orders. Since 2026-10-02 the row never carries the buyer userid or the raw deliveryaddress; shipto replaces it (contact details only wit…
17 properties
V1Error
object
Every error on /api/v1. Branch on error.code (stable), never on message. A 5xx never carries database text; quote requestid to support. Some codes add safe det…
1 property 1 required
OrderRefundRecord
object
8 properties
OrderRefundRequest
object
POST /api/v1/orders/{id}/refunds body. Send EXACTLY one of amountcents (minor units) or full: true — there is no implicit full refund. Unknown fields are refus…
3 properties 1 required
OrderTransition
object
8 properties 6 required
Order
object
One order as GET /api/v1/orders/{id} returns it. Fields marked "customers:pii" appear only when the key also carries the customers:pii scope; otherwise they ar…
29 properties 29 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

xavio-in-orders-api-openapi.yml Raw ↑

Other APIs xavio-in publishes across the network.

xavio-in Bookings API
xavio-in Discovery API
xavio-in Leads API
xavio-in MCP API
xavio-in Products API
xavio-in Stories API
xavio-in Uploads API
xavio-in Webhooks API
Where this information came from

This is an independent, third-party profile of xavio-in Orders API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.