public
POST /v1/public/cart/{token}/marketplace
Add one marketplace package to an anonymous cart.
Authentication
This endpoint is public. It takes no credential and no organisation — it is what our own marketing site and AI answer engines read.
This endpoint takes no organisation id. Your key already identifies the organisation it belongs to, and the response is scoped to it.
Try it
Replace anything in angle brackets with your own values, and the key placeholder with a key from your dashboard.
curl -X POST https://api.zinndigital.com/v1/public/cart/{token}/marketplace \
-H "Content-Type: application/json" \
-d '{ "listing_package_id": <Uuid> }'Signed in? The API console in your dashboard fills in your real organisation id and your own key, and runs the request against the live API so you can see the actual response. Open this endpoint in the API console
Details
Guest checkout for the marketplace (s1014 J08, owner 2026-10-14: no account and no card needed before buying; the account is created at checkout). The anonymous half of POST /v1/carts/{cartId}/lines with kind=marketplace_package. Only listing_package_id is read. The price, currency and listing come from the package on a live listing; the basket must be in the package's currency (the marketplace is USD-native, docs/82 §2), and one package may appear once. A package that is off sale, a test listing, or a currency mismatch is a 422 the visitor can act on. At checkout the line is re-validated with the buyer's new org, which is also where a seller buying their own listing is refused.
Parameters
| Name | Type | Required | What it is |
|---|---|---|---|
token (path) | string | Yes | The anonymous cart's opaque bearer token (zgc_…), as returned by createPublicCart. It is a credential — anyone holding it can read and modify the cart — and it travels in… |
Request body
| Name | Type | Required | What it is |
|---|---|---|---|
listing_package_id | Uuid | Yes | UUIDv7 identifier — sortable by creation time (docs/02 §8). |
Response
| Name | Type | Required | What it is |
|---|---|---|---|
id | Uuid | Yes | UUIDv7 identifier — sortable by creation time (docs/02 §8). |
token | string | No | The bearer token. Returned only from createPublicCart — it is absent on every subsequent read, because only its digest is stored. |
status | string<open, converted, expired> | Yes | — |
currency | CurrencyCode | Yes | ISO 4217 currency code (money is minor units + this code — CLAUDE.md §2.8). |
product_line | string | No | — |
expires_at | string | Yes | After this the cart is gone — reads 404 whether or not it has been purged. |
items | PublicCartItem[] | Yes | — |
totals | PublicCartTotals | Yes | Pre-tax totals. Tax appears on the order, once a billing country exists. |
Errors this endpoint can return
404 · 422 · 429