Build on the GrivaOne API
GrivaOne is a cloud ERP for sales, purchasing, inventory and accounting. The same REST API that powers the product is available to your own integrations — a predictable, JSON-over-HTTPS interface with token authentication. This reference documents the endpoints that exist today.
Base URL
https://gulfpay-production.up.railway.app/api/v1
Every route is served under the /api global prefix and URI version v1. All traffic is HTTPS and all bodies are JSON.
What you can do
- Read and write customers, items and vendors
- Create quotations, orders, invoices and delivery notes
- Record receipts and payments against documents
- Retry any write safely with an idempotency key
# 1. Log in to get an access token
curl -X POST https://gulfpay-production.up.railway.app/api/v1/auth/login \
-H "Content-Type: application/json" \
-d '{ "email": "you@company.com", "password": "your-password" }'
# 2. Call an authenticated endpoint with the token
curl https://gulfpay-production.up.railway.app/api/v1/customers \
-H "Authorization: Bearer <ACCESS_TOKEN>"Explore the reference
Quickstart
Get a token and make your first authenticated call in two requests.
Read moreAuthentication
Log in for an access token and send it as a Bearer credential.
Read moreAPI keys
How machine access works today with bearer JWTs — and what is planned.
Read moreMaking requests
JSON bodies, required headers and the standard response envelope.
Read morePagination & filtering
Page through list endpoints and narrow results with common filters.
Read moreIdempotent requests
Retry a write safely with an Idempotency-Key; the 409 replay contract.
Read moreRate limits
Per-IP throttling, the global window and the stricter auth limits.
Read moreErrors
The standard error envelope and every HTTP status the API returns.
Read moreVersioning & deprecation
URI versioning under /v1 and how breaking changes are handled.
Read moreSDKs & code samples
The same call in cURL, JavaScript, Node, Python and PHP.
Read moreAPI console
Paste a token and run a real request against the live API in your browser.
Read morePostman & OpenAPI
Import the OpenAPI 3 spec or the Postman collection to explore the API.
Read moreEndpoints
Auth, customers, items, sales, purchasing, payments and receipts.
Read moreWebhooks
The signature-verified payment-gateway webhook: verification & retries.
Read moreChangelog
Notable platform and API changes, newest first.
Read moreStatus
Where to check live availability and past incidents.
Read moreSupport
How to get help, what to include and where to reach the team.
Read moreRoadmap
What isn't in the public API yet — first-class API keys, SDKs and more.
Read more