Authentication
How to authenticate with the Presscart API using bearer tokens, including token types and scopes.
The Presscart API lets you programmatically browse the media outlet marketplace, place orders for media placements, and manage PR campaigns — all through server-to-server API token authentication.
Base URL
https://api.presscart.comBearer header
Include your token in the Authorization header of every request:
Authorization: Bearer pc_xxxx_xxxxxxx_xxxxxxxx_xxxxxxxxToken format
- Tokens are prefixed with
pc_ - The raw token is only shown when the token is created or regenerated
- Tokens are stored hashed on the server side
Token types
| Type | Description |
|---|---|
full_access | Bypasses scope checks for all API-token routes |
custom | Can only access the explicit scopes attached to the token |
read_only | Can read and list resources for its scopes but cannot perform write actions |
Scopes
Scopes control which endpoints your token can access. Assign only the scopes your integration needs.
| Scope | Routes |
|---|---|
outlets.lists | GET /outlets |
outlets.read | GET /outlets/\{outlet_id\} |
products.read | GET /products/\{product_id\}, GET /products/listings |
orders.lists | GET /orders, GET /order-items, GET /profiles/\{profile_id\}/orders, GET /profiles/\{profile_id\}/order-items |
orders.read | GET /orders/\{order_id\} |
orders.create | POST /orders/checkout |
profiles.create | POST /profiles |
profiles.update | PATCH /profiles/\{profile_id\} |
profiles.lists | GET /teams/\{team_id\}/profiles |
campaigns.lists | GET /campaigns, GET /profiles/\{profile_id\}/campaigns |
campaigns.read | GET /campaigns/\{campaign_id\}, GET /campaigns/\{campaign_id\}/articles, GET /campaigns/\{campaign_id\}/articles/status-count |
campaigns.create | POST /campaigns |
campaigns.update | PUT /campaigns/\{campaign_id\}, POST /campaigns/\{campaign_id\}/order-items, POST /questionnaires/\{campaign_id\}/link |
Verify your token
Confirm your token is valid and inspect your session:
curl "https://api.presscart.com/auth/token" \
-H "Authorization: Bearer $PRESSCART_API_TOKEN"Response:
{
"source": "api_token",
"team_id": "11111111-1111-1111-1111-111111111111",
"token_type": "custom",
"scopes": ["products.read", "orders.create", "campaigns.update"],
"pro_pricing_enabled": true
}