Protected endpoints

API endpoints that require credentials — a session cookie for the account endpoints, and the HTTP Basic password arranged with the Haszno team for everything else on haszno.com.

Overview

On the hosted demo at https://haszno.com, the endpoints in the endpoint groups need an HTTP Basic auth header (demo:<password>). The account and session endpoints are the exception: they are not behind the Basic wall and use a session cookie instead. On a self-hosted instance with HASZNO_API_KEY set, send that key in the x-api-key header instead of Basic auth; without it, the routes are open.

Obtain the Basic password by contacting the Haszno team. The examples on this page use the placeholder $HASZNO_BASIC (Basic auth credentials in user:pass form), sourced from your environment. Never hardcode credentials in code.

# Set once in your shell:
export HASZNO_BASIC="demo:your-password-here"

Account and session endpoints

These endpoints do not need the HTTP Basic password, not even on haszno.com. They work with a session cookie (haszno_session, valid for 30 days), which register and login set.

• A session cookie unlocks only these endpoints. It does not open the routes in the endpoint groups on haszno.com.
• The token endpoints accept only the session cookie, so a Bearer token cannot create, list or revoke tokens.
• With a session cookie, POST and DELETE on /api/auth/tokens must come from the site's own origin (CSRF check, 403 otherwise). register, login and logout are exempt.
• On a self-hosted instance with HASZNO_API_KEY set, register, login, logout and me skip the key check, but /api/auth/tokens also needs x-api-key.
• Rate limits for register and login are listed in Errors.

Endpoint groups

On haszno.com, every endpoint in the groups below needs the HTTP Basic password.

Shop settings

Products — own shop

Supplier network and catalogue

Recommendations and ideas

Orders

Feeds

Rules and automation

Price proposals

Peers and sharing

Shop connections and marketplace

Routing

Fulfilment

Insights and reports

Partners and metrics

Billing

Group buys

Store connect API, search, and analysis

Shop launcher and onboarding

Full reference — 10 most useful endpoints

GET/api/recommendations

Returns a shortlist of products from the partner catalogue ranked by trend momentum, margin potential, and market availability. Use this to surface products worth adding to the shop.

Protected Read-only

Parameters

Request

curl --fail-with-body \
  -u "$HASZNO_BASIC" \
  'https://haszno.com/api/recommendations?cats=kert'

Response (200)

items sub-fields (selected)

{
  "anchor": "kerti napernyő",
  "geo": "HU",
  "items": [
    {
      "id": 212,
      "name": "Kerti napernyő · Prémium",
      "sku": "DEMO-212",
      "supplierName": "Példa-partner · Kert és növény",
      "wholesaleNet": 3200,
      "rrpGross": 7990,
      "stock": 15,
      "marginNet": 2080,
      "marginPct": 32.8,
      "recommendedPriceGross": 7490,
      "keyword": "kerti napernyő",
      "interest4w": 72,
      "interest12m": 61,
      "trend": "up",
      "momentum": 1.18,
      "score100": 84
    }
  ]
}

GET/api/catalogue/products

Searches the shared partner product catalogue. Supports free-text search, category and supplier filters, margin and price bands, and pagination. This is the primary discovery endpoint for adding new products to the shop.

Protected Read-only

Parameters

Request

curl --fail-with-body \
  -u "$HASZNO_BASIC" \
  'https://haszno.com/api/catalogue/products?q=napernyő&inStock=1&sort=margin_desc&pageSize=10'

Response (200)

Each item in items: id, name, sku, supplierName, supplierId, category, wholesaleNet (HUF), rrpGross (HUF), stock, imageUrl, country, marginNet (HUF), marginPct.

{
  "items": [
    {
      "id": 212,
      "name": "Kerti napernyő · Prémium",
      "sku": "SUP-212",
      "supplierName": "Minta Kft.",
      "supplierId": 7,
      "category": "kert",
      "wholesaleNet": 3200,
      "rrpGross": 7990,
      "stock": 15,
      "imageUrl": null,
      "country": "HU",
      "marginNet": 2080,
      "marginPct": 32.8
    }
  ],
  "total": 142,
  "facets": {
    "categories": [{"key": "kert", "count": 142}],
    "suppliers": [{"id": 7, "name": "Minta Kft.", "count": 142}]
  }
}

POST/api/feeds/import

Imports a supplier product feed. Accepts CSV or XML format up to 10 MB. Creates new products and updates existing ones matched by SKU.

Protected Write

Request body (Content-Type: application/json)

CSV format: one header row followed by data rows. Required columns: sku, name, costNet, stock. Optional: rrpGross.

sku,name,costNet,stock,rrpGross
ABC-001,Kerti szék,2100,10,4990
ABC-002,Kerti asztal,8500,3,19990

Request

curl --fail-with-body \
  -u "$HASZNO_BASIC" \
  -X POST https://haszno.com/api/feeds/import \
  -H 'Content-Type: application/json' \
  -d '{
    "supplierId": 3,
    "format": "csv",
    "content": "sku,name,costNet,stock,rrpGross\nABC-001,Kerti szék,2100,10,4990"
  }'

Response (200)

{"created": 1, "updated": 0, "total": 1}

Error responses

POST/api/webhooks/order

Receives a new order from a connected webshop. The API validates the SKUs, checks stock, and creates an order record for processing.

Protected Write

Request body (Content-Type: application/json)

items array item

Request

curl --fail-with-body \
  -u "$HASZNO_BASIC" \
  -X POST https://haszno.com/api/webhooks/order \
  -H 'Content-Type: application/json' \
  -d '{
    "externalId": "SHOP-20261112-001",
    "customerName": "Kiss Éva",
    "address": "1111 Budapest, Példa utca 1.",
    "items": [
      {"sku": "ABC-001", "qty": 2}
    ]
  }'

Response (201)

{"id": 1047}

Error responses

PUT/api/settings

Updates the shop's global pricing rules. All fields are optional; omit a field to leave its current value unchanged.

Protected Write

Request body (Content-Type: application/json)

Request

curl --fail-with-body \
  -u "$HASZNO_BASIC" \
  -X PUT https://haszno.com/api/settings \
  -H 'Content-Type: application/json' \
  -d '{
    "undercutPct": 2,
    "minMarginPct": 15,
    "shippingMarkets": ["HU", "SK"]
  }'

Response (200)

Returns the updated settings row. Same schema as GET /api/settings (without the demo field on a real instance).

{
  "id": 1,
  "undercutPct": 2,
  "minMarginPct": 15,
  "vatPct": 27,
  "shippingMarkets": ["HU", "SK"],
  "automationPaused": false
}

PATCH/api/products/:id

Updates market price data or sets a manual gross price override for a single product.

Protected Write

Path parameters

Request body (Content-Type: application/json)

All fields are optional. Send only the fields you want to change.

Request

curl --fail-with-body \
  -u "$HASZNO_BASIC" \
  -X PATCH https://haszno.com/api/products/101 \
  -H 'Content-Type: application/json' \
  -d '{"priceGross": 2990}'

Response (200)

Returns the updated product row. Same schema as a single item from GET /api/products.

POST/api/products/apply-prices

Applies the recommended price to listed products. By default applies to all listed products. Optionally restricted to a subset by IDs or supplier.

Protected Write

Request body (Content-Type: application/json)

All fields are optional.

Request

# Apply to all listed products:
curl --fail-with-body \
  -u "$HASZNO_BASIC" \
  -X POST https://haszno.com/api/products/apply-prices \
  -H 'Content-Type: application/json' \
  -d '{}'

# Apply to specific products only:
curl --fail-with-body \
  -u "$HASZNO_BASIC" \
  -X POST https://haszno.com/api/products/apply-prices \
  -H 'Content-Type: application/json' \
  -d '{"ids": [101, 102, 103]}'

Response (200)

{"changed": 847, "total": 1400}

GET/api/rules

Returns all automation rules configured for the shop.

Protected Read-only

Parameters

None.

Request

curl --fail-with-body \
  -u "$HASZNO_BASIC" \
  https://haszno.com/api/rules

Response (200)

Returns an array of rule objects.

trigger enum

conditions item sub-fields

actions item sub-fields

[
  {
    "id": 5,
    "name": "Veszteséges termékek javaslata",
    "enabled": true,
    "trigger": "market_price",
    "conditions": [
      {"field": "current.marginPct", "op": "lt", "value": 0}
    ],
    "actions": [
      {"type": "propose_price"}
    ],
    "template": "loss-guard",
    "createdAt": "2026-10-01T10:00:00.000Z"
  }
]

GET/api/network/suppliers

Returns all suppliers available in the Haszno network, together with the shop's connection status for each.

Protected Read-only

Parameters

None.

Request

curl --fail-with-body \
  -u "$HASZNO_BASIC" \
  https://haszno.com/api/network/suppliers

Response (200)

Returns an array of network supplier objects.

[
  {
    "id": 7,
    "name": "Minta Kft.",
    "category": "kert",
    "country": "HU",
    "productCount": 340,
    "connected": false,
    "avgResellerMarginPct": 28.4
  }
]

POST/api/products/:id/listing

Lists or unlists a single product. When listing a product that was previously unlisted, priceGross is automatically set to the current recommended.priceGross.

Protected Write

Path parameters

Request body (Content-Type: application/json)

Request

curl --fail-with-body \
  -u "$HASZNO_BASIC" \
  -X POST https://haszno.com/api/products/101/listing \
  -H 'Content-Type: application/json' \
  -d '{"listed": true}'

Response (200)

Returns the updated product row. Same schema as a single item from GET /api/products. The listed field reflects the new state and priceGross reflects the auto-applied recommended price when listing.

{
  "id": 101,
  "listed": true,
  "priceGross": 2090,
  "recommended": {
    "priceGross": 2090,
    "status": "versenykepes"
  }
}