All integrations

Gift Up!

BUSINESS · COMMERCE & FINANCE

Issue, redeem, and top up gift cards on that account’s own store.

Connecting Gift Up! in practice

Throughput is a leaky bucket at 5 requests a second per key, burstable to 10 for roughly five minutes, and the only thing separating a test order from a real one is a single request header: x-giftup-testmode: true. Forget it and Gift Up charges its fee on the order you just created.

Rate limits

  • Leaky bucket: 5 requests per second sustained per API key, burst up to 10 per second for about 5 minutes.
  • Responses slow down as volume rises before Gift Up returns HTTP 429 for severe violations.
  • List endpoints page with limit (default 10, maximum 100) and offset (default 0), returning total and hasMore.

Worth knowing

  • Test mode is a header, not a separate key or base URL, so the same credential against https://api.giftup.app can create either test data or billable live orders depending on one header an agent may drop on retry.
  • The documentation is explicit that developing against live mode means "you will be charged our fee if you create any new orders" — there is no free live sandbox.
  • The default page size of 10 makes a naive list-everything loop ten times more requests than the 100 maximum would, and 5 requests a second is a low budget to spend that way.
  • Plain HTTP calls fail outright rather than redirecting, so a misconfigured base URL looks like a connectivity problem.

Checked against Gift Up! API (2026-09-29)

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

giftup_delete_groups_by_idWRITE

Delete item group via DELETE /groups/{id}

api
giftup_delete_hooks_by_idWRITE

Delete webhook via DELETE /hooks/{id}

api
giftup_delete_items_by_idWRITE

Delete item via DELETE /items/{id}

api
giftup_delete_settings_gift_card_artwork_by_idWRITE

Delete gift card artwork via DELETE /settings/gift-card/artwork/{id}

api
giftup_delete_users_by_idWRITE

Delete user via DELETE /users/{id}

api
giftup_get_companyREAD

Get company via GET /company

api
giftup_get_gift_cardsREAD

List gift cards via GET /gift-cards

api
giftup_get_gift_cards_by_codeREAD

Get gift card by code via GET /gift-cards/{code}

api
giftup_get_groupsREAD

List item groups via GET /groups

api
giftup_get_groups_by_idREAD

Get item group by id via GET /groups/{id}

api
giftup_get_hooksREAD

List webhooks via GET /hooks

api
giftup_get_hooks_by_idREAD

Get webhook via GET /hooks/{id}

api
giftup_get_integrations_stripe_connectionREAD

Get stripe connection via GET /integrations/stripe/connection

api
giftup_get_itemsREAD

List items via GET /items

api
giftup_get_items_by_idREAD

Get item by id via GET /items/{id}

api
giftup_get_locationsREAD

List locations via GET /locations

api
giftup_get_ordersREAD

List orders via GET /orders

api
giftup_get_orders_by_idREAD

Get order by id via GET /orders/{id}

api
giftup_get_pingREAD

Ping get via GET /ping

api
giftup_get_promotionsREAD

List promotions via GET /promotions

api
giftup_get_reports_transactionsREAD

List report transactions via GET /reports/transactions

api
giftup_get_reports_transactions_by_idREAD

Get report transaction via GET /reports/transactions/{id}

api
giftup_get_settings_checkoutREAD

Get checkout settings via GET /settings/checkout

api
giftup_get_settings_emailREAD

Get email settings via GET /settings/email

api
giftup_get_settings_gift_cardREAD

Get gift card settings via GET /settings/gift-card

api
giftup_get_settings_gift_card_artworkREAD

List gift card artwork via GET /settings/gift-card/artwork

api
giftup_get_settings_shippingREAD

Get shipping settings via GET /settings/shipping

api
giftup_get_usersREAD

List users via GET /users

api
giftup_get_users_by_idREAD

Get user via GET /users/{id}. WITHHELD: Gift Up! does not serve this route for this account (it answers 404 to a valid key), so this call is refused before any request is made. Use giftup_get_users to list the account's users.

api
giftup_patch_gift_cards_by_codeWRITE

Update gift card via PATCH /gift-cards/{code}

api
giftup_patch_groups_by_idWRITE

Update item group via PATCH /groups/{id}

api
giftup_patch_items_by_idWRITE

Update item via PATCH /items/{id}

api
giftup_patch_orders_by_idWRITE

Update order via PATCH /orders/{id}

api
giftup_patch_settings_checkoutWRITE

Update checkout settings via PATCH /settings/checkout

api
giftup_patch_settings_emailWRITE

Update email settings via PATCH /settings/email

api
giftup_patch_settings_gift_cardWRITE

Update gift card settings via PATCH /settings/gift-card

api
giftup_patch_users_by_idWRITE

Update user via PATCH /users/{id}. WITHHELD: Gift Up! does not serve this route for this account (it answers 404 to a valid key), so this call is refused before any request is made. Use giftup_get_users to list the account's users.

api
giftup_post_gift_cards_by_code_reactivateWRITE

Reactivate gift card via POST /gift-cards/{code}/reactivate

api
giftup_post_gift_cards_by_code_redeemWRITE

Redeem gift card via POST /gift-cards/{code}/redeem

api
giftup_post_gift_cards_by_code_redeem_in_fullWRITE

Redeem gift card in full via POST /gift-cards/{code}/redeem-in-full

api
giftup_post_gift_cards_by_code_top_upWRITE

Top up gift card via POST /gift-cards/{code}/top-up

api
giftup_post_gift_cards_by_code_undo_redemptionWRITE

Undo redemption via POST /gift-cards/{code}/undo-redemption

api
giftup_post_gift_cards_by_code_voidWRITE

Void gift card via POST /gift-cards/{code}/void

api
giftup_post_gift_cards_transfer_balancesWRITE

Transfer balances between gift cards via POST /gift-cards/transfer-balances

api
giftup_post_groupsWRITE

Create item group via POST /groups

api
giftup_post_hooks_by_event_subscribeWRITE

Add webhook via POST /hooks/{event}/subscribe

api
giftup_post_integrations_stripe_connectionWRITE

Update stripe connection via POST /integrations/stripe/connection

api
giftup_post_itemsWRITE

Create item via POST /items

api
giftup_post_ordersWRITE

Create order via POST /orders

api
giftup_post_orders_by_id_notesWRITE

Add note to order via POST /orders/{id}/notes

api
giftup_post_orders_by_id_postWRITE

Mark order as posted via POST /orders/{id}/post

api
giftup_post_partners_account_createWRITE

Provision gift up account via POST /partners/account/create. WITHHELD: restricted to pre-approved Gift Up! platform partners, so this call is refused before any request is made.

api
giftup_post_pingREAD

Ping post via POST /ping

api
giftup_post_settings_gift_card_artworkWRITE

Upload gift card artwork via POST /settings/gift-card/artwork

api
giftup_post_usersWRITE

Invite user via POST /users. WITHHELD: Gift Up! does not serve this route for this account (it answers 404 to a valid key), so this call is refused before any request is made. Use giftup_get_users to list the account's users.

api

Put Gift Up! behind one governed endpoint.

Same permissions, same audit trail, whatever else you connect next.