marketplace
POST /v1/marketplace/listings/{listing_id}/enquiries
Ask a seller a question before buying.
Authentication
Send an API key as a bearer token. This endpoint does not state a specific permission in the specification, so give your key the least it needs and check the response rather than assuming.
Where your organisation id goes
This endpoint takes org_id as a query parameter. Leave it out and the call covers your whole tenancy subtree; send it to narrow the call to one organisation.
Your organisation id is on the API keys screen in your dashboard, beside the key itself. It is the same id in every call you make.
Try it
Replace anything in angle brackets with your own values, and the key placeholder with a key from your dashboard.
curl -X POST https://api.zinndigital.com/v1/marketplace/listings/{listing_id}/enquiries \
-H "Authorization: Bearer zdk_live_…" \
-H "Content-Type: application/json" \
-d '{ "body": <string> }'Signed in? The API console in your dashboard fills in your real organisation id and your own key, and runs the request against the live API so you can see the actual response. Open this endpoint in the API console
Details
docs/133 D26. **Attachments are refused here entirely**: an attachment bypasses text scanning, we have no OCR, and on the one surface where nobody has paid there are therefore no files. Saying so is honest; scanning an image we cannot read would not be.
Parameters
| Name | Type | Required | What it is |
|---|---|---|---|
listing_id (path) | string | Yes | — |
org_id (query) | string | No | Which of your organizations the enquiry is from. Optional when you belong to exactly one; **required (422) when you belong to more than one**, because the platform will not gues… |
Request body
| Name | Type | Required | What it is |
|---|---|---|---|
body | string | Yes | — |
locale | string | No | — |
attachments | object[] | No | Refused entirely on a pre-sales thread: an attachment bypasses text scanning and we have no OCR, so on the one surface where nobody has paid there are no files. |
Response
| Name | Type | Required | What it is |
|---|---|---|---|
id | string | Yes | — |
body | string | Yes | What the reader sees — the masked form where the policy masked it. The original is always kept in the order record and is what a dispute reads; it is not in this payload, becaus… |
mine | boolean | Yes | — |
from_staff | boolean | No | — |
source_locale | string | No | BCP-47. Participants write in their own language; a message is translated FOR THE READER and the original is always shown, never replaced. |
masked | boolean | No | — |
policy_notice | string | No | A message KEY, rendered in every locale by the client. Set only for the SENDER of a masked message — telling the recipient "they tried to give you an email address" would be an… |
held | boolean | No | Only on the send response. The one case where reporting "sent" would be a lie. |
created_at | string | Yes | — |
Errors this endpoint can return
401 · 404 · 422