API Documentation | Meridian Supply Co.

Authentication

All API requests must be authenticated with an API key passed in the X-API-Key header. API keys are issued from your account dashboard under Settings → API Access.

Base URL https://api.meridian-supply.com/v2

      # Example authenticated request

      curl -H "X-API-Key: msc_live_xxxxxxxxxxxxxxxx" \

           -H "Accept: application/json" \

           https://api.meridian-supply.com/v2/orders?customer_id=ACC-00412

Orders

Retrieve, search, and manage purchase orders associated with your account.

GET /api/orders List orders for a customer account

Returns a paginated list of orders. Requires customer_id. Results include order status, line items, and shipping information.

🔒 Requires authentication. Returns only orders belonging to the authenticated account's customer_id.

Parameter	Type	Required	Description
customer_id	string	required	Account number (e.g., ACC-00412). Must match the authenticated account.
status	string	optional	Filter by status: `pending`, `shipped`, `delivered`, `cancelled`
from_date	string	optional	ISO 8601 date. Returns orders placed on or after this date.
limit	integer	optional	Results per page. Default: 25. Max: 100.
page	integer	optional	Page number. Default: 1.

          // Example response

          {

            "orders": [

              {

                "order_id": "ORD-2024-091847",

                "customer_id": "ACC-00412",

                "status": "shipped",

                "total": 842.60,

                "items": 7,

                "placed_at": "2024-09-14T14:22:00Z",

                "tracking": "1Z999AA10123456784"

              }

            ],

            "total": 0,

            "page": 1,

            "customer_id": "",

            "status": "ok"

          }

Product Search

Search the Meridian catalog by keyword, SKU, category, or specification.

GET /search Full-text product search

Returns a list of matching products. Supports fuzzy matching and SKU lookup.

Parameter	Type	Required	Description
q	string	required	Search query string. Max 200 characters.
category	string	optional	Limit results to a product category slug.
in_stock	boolean	optional	If true, return only items with available inventory.

GET /products Browse products by category

Returns the product listing page filtered by category. Use the category query parameter with a category slug.

Account & Authentication

Session management and account operations.

POST /login Authenticate and create a session

Accepts username and password form fields. Returns a session cookie on success, or HTTP 401 on invalid credentials.

⚠ Rate-limited to 10 attempts per minute per IP. Accounts are locked after 5 failed attempts within 15 minutes.

Field	Type	Required	Description
username	string	required	Email address or account number (ACC-XXXXX)
password	string	required	Account password. Min 8 characters.

GET /admin Admin management panel

Reserved for Meridian Supply Co. internal administrators. Requires admin-level authentication and IP allowlist entry. Returns 403 Forbidden for all other requestors.

🚫 This endpoint is not available to API customers. Access attempts are logged.

GET /cmd System status (internal)

Returns basic system status information for internal monitoring. The exec parameter is reserved for future use by the infrastructure monitoring agent.

⚠ Public system status only. No command execution. Any attempt to use the exec parameter for system commands is logged as a security event.

Rate Limits & Quotas

API access is subject to the following rate limits. Exceeding limits returns HTTP 429.