Changelog — MythicDeals API

Every change to the MythicDeals API. Additive changes ship within the current version; breaking changes get a new version. See versioning.

v1.1.1 October 27, 2026

Fixes found while reviewing the v1.1.0 documentation.

Orders — POST /orders/{order}/deliver now also accepts a paid order: it is started and delivered in one step (both events are recorded). Orders held for a risk check still return 409. The website’s delivery form works the same way.
Units — PATCH /listings/{id}/units/{unitId} edits gift card codes (code, pin, expires_at). A field that does not apply to the listing’s type now returns 422 instead of being ignored.
Scopes — new scope notifications:write, now required by POST /notifications/read. Add it to tokens that mark notifications as read.
Listings — activating a listing (POST /listings/{id}/activate, status: active in PATCH /listings/bulk and POST /listings/bulk-update) follows the website’s publish rules: stock above 0, codes for gift cards, required attributes filled. Otherwise: cannot_activate with the reason. GET /listings/import/template refuses gift card categories (422), like the preview.
Account — GET /account/breaks uses the standard pagination (data, links, meta); limits.requests_per_minute shows the real limit.
Webhooks — dispute.created and dispute.updated carry the dispute exactly as GET /disputes returns it (requested_outcome instead of requested).

v1.1.0 October 27, 2026

30 new endpoints (66 in total), 5 new scopes and a new webhook event. Everything is additive: v1.0 integrations keep working unchanged.

Disputes — GET /disputes (your sales, or role=buyer), GET /disputes/{id} with offers, evidence and timeline, GET /disputes/{id}/events, evidence download, and seller actions: accept, counter (full refund, partial refund or redeliver with corrected details), escalate and messages (attachments become evidence).
Orders — POST /orders/{order}/cancel (full refund, optional restock), PATCH /orders/{order}/delivery to correct a delivery (history kept, buyer notified), and GET /orders/{order}/invoice with a signed, token-free printable invoice.html link.
Payouts — GET /payouts and GET /payouts/{id}: status, fee, net amount and transfer reference of every withdrawal.
Notifications — GET /notifications and POST /notifications/read: the website’s notification bell.
Account & availability — GET /account (verification, level, restrictions and limits), PUT /account/status (online / appear offline) and breaks: GET / POST /account/breaks, DELETE /account/breaks/current.
Listings — POST /listings/{id}/duplicate, PATCH /listings/{id}/units/{unitId} (edit one delivery unit), POST /listings/bulk-update (change every listing matching a filter, with dry_run and price clamping), GET /listings/{id}/competitors (other sellers’ offers and your rank) and CSV import: GET /listings/import/template, POST /listings/import/preview, POST /listings/import/confirm.
Gift cards — GET /giftcards/brands and GET /giftcards/regions; gift card offers are created with POST /listings and their codes in delivery_units (code, pin, expires_at); stock is the number of codes. See the gift cards guide.
Scopes — disputes:read, disputes:write, notifications:read, account:read, account:write. Existing tokens keep their scopes; create a new token to use the new endpoints.
Webhooks — new event dispute.created, sent once when a dispute or warranty claim is opened on one of your orders.
Errors — new codes preview_expired (409), too_many_matches (422) and forbidden (403, signed links).
Documentation — POST /orders/{order}/deliver is now documented precisely: a paid order must be started first (behaviour unchanged). The reference has collapsible groups and an endpoint filter.

v1.0.0 October 26, 2026

First public release of the MythicDeals API.

36 endpoints under /api/v1: account, catalog, listings (single and bulk), listing images, instant-delivery units, orders (start, deliver), order chat, wallet and webhooks.
Personal tokens with 9 scopes, created at Settings → API access.
12 webhook events plus ping, signed with HMAC-SHA256, with automatic retries and auto-disable.
Idempotency-Key support on endpoints that create things.
Rate limit of 120 requests per minute with X-RateLimit-* headers.
OpenAPI 3.1 specification at openapi.json.