Everything in the partner dashboard is available over HTTP with your API key.
The base URL is https://flarestore.vip. All responses
are JSON and carry success. Money is always an
integer number of cents.
Your API key
Send your key as a bearer token on every request. You'll find it in your
dashboard under API access. Keys look like
fs_pk_....
Treat the key like a password — it can spend your balance. If it leaks, rotate it from the dashboard and the old key stops working immediately. The web dashboard uses a session cookie instead, so rotating a key never logs you out.
Rate limits: 120 GET and 60 POST per minute, with tighter limits on login
and on slot redemption (30/min). Over the limit you get
429 — back off and retry.
Who am I
Your account: slug, display name, account type, balance and referral URL.
Issue a new API key. The previous key stops working the instant this returns, so update your integration before calling it.
What you can sell, and for how much
Every plan enabled on your account with your resolved pricing. This is the endpoint to build your own storefront against — it already accounts for whichever pricing model your account runs on.
Wholesale accounts get your_price:
Affiliate accounts get customer_price and
your_commission instead:
orderable: false means the plan is listed but
not currently redeemable — don't offer it to customers until it flips true.
Sales and earnings
Totals plus a per-plan breakdown. Affiliates get commission earned, paid out and owing; wholesalers get total spend and current balance.
Your orders, newest first. Takes ?limit= (1–200, default 50) and ?offset=. Customer email and payment details are never included.
Affiliate only. Payout history plus the balance currently owing to you.
Buying and redeeming slots
These endpoints are wholesale-only. On an affiliate account they return
403.
Your current balance, in cents.
Every balance movement — top-ups, slot debits, refunds and adjustments — each with the balance that resulted.
Redeem one slot. Charges your unit price, registers the device and starts provisioning.
Returns the order, what you were charged, your new balance, and an access token your customer uses to collect their certificate:
Provisioning is asynchronous. Poll status_url
or /me/orders/{order_id} until the certificate is
ready. If provisioning can't start your balance is refunded
automatically — you are never charged for a slot you didn't get.
Status of one of your own orders, including device and provisioning state. Orders belonging to another partner return 404.
Status codes
| Code | Meaning | What to do |
|---|---|---|
| 400 | Bad request — missing or malformed field | Check the body; the message names the problem |
| 401 | No credentials | Send the Authorization header |
| 402 | Insufficient balance | Top up; the message states the shortfall |
| 403 | Invalid key, or wrong account type for the endpoint | Check the key and your track |
| 404 | Not found, or not yours | Confirm the ID belongs to your account |
| 409 | Plan not currently redeemable | Retry later or pick another plan |
| 429 | Rate limited | Back off and retry |
| 500 | Our fault | You were not charged. Retry, then tell us |
Errors carry a human-readable detail — log it,
it usually says exactly what's wrong.