BUSINESS · COMMERCE & FINANCE
Issue, redeem, and top up gift cards on that account’s own store.
Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.
Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.
Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
giftup_delete_groups_by_idWRITEDelete item group via DELETE /groups/{id}
giftup_delete_hooks_by_idWRITEDelete webhook via DELETE /hooks/{id}
giftup_delete_items_by_idWRITEDelete item via DELETE /items/{id}
giftup_delete_settings_gift_card_artwork_by_idWRITEDelete gift card artwork via DELETE /settings/gift-card/artwork/{id}
giftup_delete_users_by_idWRITEDelete user via DELETE /users/{id}
giftup_get_companyREADGet company via GET /company
giftup_get_gift_cardsREADList gift cards via GET /gift-cards
giftup_get_gift_cards_by_codeREADGet gift card by code via GET /gift-cards/{code}
giftup_get_groupsREADList item groups via GET /groups
giftup_get_groups_by_idREADGet item group by id via GET /groups/{id}
giftup_get_hooksREADList webhooks via GET /hooks
giftup_get_hooks_by_idREADGet webhook via GET /hooks/{id}
giftup_get_integrations_stripe_connectionREADGet stripe connection via GET /integrations/stripe/connection
giftup_get_itemsREADList items via GET /items
giftup_get_items_by_idREADGet item by id via GET /items/{id}
giftup_get_locationsREADList locations via GET /locations
giftup_get_ordersREADList orders via GET /orders
giftup_get_orders_by_idREADGet order by id via GET /orders/{id}
giftup_get_pingREADPing get via GET /ping
giftup_get_promotionsREADList promotions via GET /promotions
giftup_get_reports_transactionsREADList report transactions via GET /reports/transactions
giftup_get_reports_transactions_by_idREADGet report transaction via GET /reports/transactions/{id}
giftup_get_settings_checkoutREADGet checkout settings via GET /settings/checkout
giftup_get_settings_emailREADGet email settings via GET /settings/email
giftup_get_settings_gift_cardREADGet gift card settings via GET /settings/gift-card
giftup_get_settings_gift_card_artworkREADList gift card artwork via GET /settings/gift-card/artwork
giftup_get_settings_shippingREADGet shipping settings via GET /settings/shipping
giftup_get_usersREADList users via GET /users
giftup_get_users_by_idREADGet user via GET /users/{id}. WITHHELD: Gift Up! does not serve this route for this account (it answers 404 to a valid key), so this call is refused before any request is made. Use giftup_get_users to list the account's users.
giftup_patch_gift_cards_by_codeWRITEUpdate gift card via PATCH /gift-cards/{code}
giftup_patch_groups_by_idWRITEUpdate item group via PATCH /groups/{id}
giftup_patch_items_by_idWRITEUpdate item via PATCH /items/{id}
giftup_patch_orders_by_idWRITEUpdate order via PATCH /orders/{id}
giftup_patch_settings_checkoutWRITEUpdate checkout settings via PATCH /settings/checkout
giftup_patch_settings_emailWRITEUpdate email settings via PATCH /settings/email
giftup_patch_settings_gift_cardWRITEUpdate gift card settings via PATCH /settings/gift-card
giftup_patch_users_by_idWRITEUpdate user via PATCH /users/{id}. WITHHELD: Gift Up! does not serve this route for this account (it answers 404 to a valid key), so this call is refused before any request is made. Use giftup_get_users to list the account's users.
giftup_post_gift_cards_by_code_reactivateWRITEReactivate gift card via POST /gift-cards/{code}/reactivate
giftup_post_gift_cards_by_code_redeemWRITERedeem gift card via POST /gift-cards/{code}/redeem
giftup_post_gift_cards_by_code_redeem_in_fullWRITERedeem gift card in full via POST /gift-cards/{code}/redeem-in-full
giftup_post_gift_cards_by_code_top_upWRITETop up gift card via POST /gift-cards/{code}/top-up
giftup_post_gift_cards_by_code_undo_redemptionWRITEUndo redemption via POST /gift-cards/{code}/undo-redemption
giftup_post_gift_cards_by_code_voidWRITEVoid gift card via POST /gift-cards/{code}/void
giftup_post_gift_cards_transfer_balancesWRITETransfer balances between gift cards via POST /gift-cards/transfer-balances
giftup_post_groupsWRITECreate item group via POST /groups
giftup_post_hooks_by_event_subscribeWRITEAdd webhook via POST /hooks/{event}/subscribe
giftup_post_integrations_stripe_connectionWRITEUpdate stripe connection via POST /integrations/stripe/connection
giftup_post_itemsWRITECreate item via POST /items
giftup_post_ordersWRITECreate order via POST /orders
giftup_post_orders_by_id_notesWRITEAdd note to order via POST /orders/{id}/notes
giftup_post_orders_by_id_postWRITEMark order as posted via POST /orders/{id}/post
giftup_post_partners_account_createWRITEProvision gift up account via POST /partners/account/create. WITHHELD: restricted to pre-approved Gift Up! platform partners, so this call is refused before any request is made.
giftup_post_pingREADPing post via POST /ping
giftup_post_settings_gift_card_artworkWRITEUpload gift card artwork via POST /settings/gift-card/artwork
giftup_post_usersWRITEInvite user via POST /users. WITHHELD: Gift Up! does not serve this route for this account (it answers 404 to a valid key), so this call is refused before any request is made. Use giftup_get_users to list the account's users.
Put Gift Up! behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.