Nuvi REST API

Issue a customer JWT from email + password

curl -X POST https://usenuvi.com/api/auth/customer/emailpass \
  -H "x-publishable-api-key: pk_live_..." \
  -H "Content-Type: application/json" \
  -d '{"email":"[email protected]","password":"••••"}'

Register a new customer

Invalidate the current session

Begin an OAuth flow — returns `{ authorization_url }`

curl "https://usenuvi.com/api/store/auth/social/google/start?return_to=/account" \
  -H "x-publishable-api-key: pk_live_..."

Exchange code + state → `{ token, customer_id, is_new_link, return_to }`. Set the token as `nuvi_customer_token` cookie on your storefront.

Apple form_post variant — same response shape, body is `application/x-www-form-urlencoded`

List the authenticated customer's connected providers (avatar, email, last_login_at). Requires customer JWT.

Unlink a single provider. Linked-account records are scoped per-customer; cross-customer access returns 404.

List products with filters (collection, category, region, price range)

curl "https://usenuvi.com/api/store/products?limit=20&offset=0" \
  -H "x-publishable-api-key: pk_live_..."

Retrieve a single product by id or handle

List product templates for the admin product editor

List product collections (Medusa default)

List product categories (Medusa default)

List approved reviews for a product (paginated, sorted)

Submit a new review (status: pending until moderated)

Full-text search across all indexed resources

curl "https://usenuvi.com/api/store/search?q=keyboard&limit=10" \
  -H "x-publishable-api-key: pk_live_..."

Create an empty cart

Add a product line item

Add an event ticket as a line item (Nuvi)

Remove an event ticket line item

Add a tour booking line item (Nuvi)

Remove a tour line item

Create payment sessions for available providers

Convert the cart to an order

curl -X POST https://usenuvi.com/api/store/carts/cart_01.../complete \
  -H "x-publishable-api-key: pk_live_..."

Active checkout configuration: enabled fields, payment providers, shipping options

Per-region payment provider configuration

Bank-transfer payment instructions for the storefront

List orders for the authenticated customer

Retrieve a single order by id

Cancel an order (within the cancellation window)

Get current customer profile

Update profile fields

Add a shipping address

List available subscription plans

List the authenticated customer's subscriptions

Create a new subscription

Retrieve a subscription

Start a subscription checkout (creates the payment session)

Pause an active subscription

Resume a paused subscription

Switch to a different plan (prorated)

Cancel a subscription

Submit a quote request with line items + custom fields

Download the generated quote PDF

Public ISG pricing configuration (services, base rates, location modifiers)

List quotable services for the dropdown selector

List published posts (locale-aware)

Retrieve post body + sanitized HTML

List comments on a post

Submit a new comment (moderated)

List categories with post counts

Retrieve a single category and its posts

List tags with post counts

Retrieve a single tag and its posts

Author profile with their published posts

List all published pages

Retrieve a static page by slug

Retrieve a form definition (fields, validation, redirects)

Retrieve the active popup form (if any)

Submit a form (with optional spam token + reCAPTCHA)

Retrieve a single asset by ID (URL, dimensions, alt text)

Subscribe an email to a list (with optional double opt-in)

Unsubscribe by token (one-click link)

Confirm unsubscribe and capture reason

Newsletter sign-up (homepage / footer widgets)

Pixel-track an email open

Click-tracking redirect

Generic analytics event ingest (page_view, add_to_cart, …)

Active banner configuration (categories, copy, links)

Persist a consent decision

Retrieve a session's consent state

Withdraw consent (GDPR Art. 7(4)) — flips opt-ins to false, keeps audit trail

Active theme: tokens, sections, settings

Resolved menu items for a handle (main-menu, footer-menu, …)

Resolved brand settings for the active store

List enabled locales with default + RTL flag

Bulk-fetch translation overrides for a resource type

Active rates per configured currency pair

Raw exchange-rate snapshot (with `base` query param)

List metafields attached to a specific resource

List all active redirects (source, target, status code)

List published events (locale + region aware)

Retrieve a single event with schedule + speakers

List ticket variants and remaining inventory

Authenticated customer's registered events

List published tours with filter (destination, duration, price)

Retrieve a single tour with itinerary + departures

List approved reviews for a tour

Submit a new review (moderated)

List travel destinations

Retrieve a single destination with related tours

List tour categories

List bookable slots for a service

Create a new booking

Single-turn chat — pass message + sessionId, get a response. Auto-detects intent and runs the right skill.

curl -X POST https://usenuvi.com/api/admin/ai/chat \
  -H "Authorization: Bearer <admin_jwt>" \
  -H "Content-Type: application/json" \
  -d '{"message":"Bu hafta hangi ürünler en çok satıldı?","session_id":"sess_..."}'

SSE streaming chat — emits incremental tokens, plus action-plan events that the client must approve or reject before execution

Approve a pending multi-action plan (proceeds to execute)

Reject a pending plan (skips execution, no side effects)

List the 24 available skills with category, examples, and icon name

Per-store skill enablement (which skills the operator has turned on for this tenant)

Store-aware context the assistant uses (catalog size, currencies, locale, configured modules)

One-shot LLM translation — input string + target locale, returns translated string. Used by the admin's 11-locale i18n pipeline.

curl -X POST https://usenuvi.com/api/admin/ai/translate \
  -H "Authorization: Bearer <admin_jwt>" \
  -H "Content-Type: application/json" \
  -d '{"text":"Save changes","target_locale":"de"}'

Generate AI voiceover for a blog post (audio URL returned when complete)

Synthesize a single chunk on demand (used during incremental editor playback)

AI drafts a social post (caption + hashtags) from a brief

Publish a draft to a connected social account (Facebook, Instagram, ...)

Schedule a draft for future publish

Cross-channel campaign metrics (Google Ads, Meta) — spend, impressions, conversions

Direct nuvi-agent chat — Bearer auth with NUVI_AGENT_API_KEY (server-side only)

SSE stream variant — multi-action approval flow events

Extract structured actions from natural language (no execution, plan-only)

List all 24 skills with metadata (id, category, model_tier, icon)

Tenant onboarding state — which skills are configured, which need credentials

Fired when a cart converts to an order

Fired when payment is captured

Fired when fulfilment ships

Fired on new customer registration

Fired on each successful renewal cycle

Fired when a customer submits a quote request