Skip to main content
The Customer Portal API is the customer-side surface of Waffo. The merchant’s backend mints a short-lived session token via Issue Session Token, and the customer’s browser (or your in-product UI) calls the endpoints below with that token in the Authorization header. The merchant API Key never leaves the server.
Session tokens are scoped by buyerIdentity + visitingStoreId and only authorize operations on records that belong to that customer within that store. They cannot read merchant-wide state.

​
Required headers on every call

A token issued with purpose: "portal" is bound to the environment of the API Key that issued it. Sending it with any other X-Environment value is rejected before the request reaches the endpoint (403 Environment mismatch). The gateway derives the customer identity and visiting store from the token; you do not pass them as separate headers.

​
Endpoints

Cancel One-time Order

Cancel a pending one-time order before payment completes

Cancel Subscription

Cancel an active or pending subscription on behalf of the customer

Reactivate Subscription

Reverse a pending cancellation while still in canceling

GraphQL

Query the customer’s own orders, payments, and refunds

​
Token-path errors

These errors are surfaced only on the session-token call path: