openapi.public.json (SWE-1133). That is the merchant-product surface.
Do not treat /openapi.json as the public product. That file is the full app schema (login, MFA, API Keys, admin) used by the dashboard client.
Use the Mintlify playground on each endpoint to send requests. Page menu → Download API spec for the OpenAPI file.
Base URL
/v2. Partner curl should hit /v2, not /api/v2.
Authentication
Merchant product routes require a bearer secret. Gift-card balance-check is public (noAuthorization). See Authentication.
Rate limits
Hashed public keys (ld_*) are limited per key. JWT App Keys are not in that limiter. See Rate limits.
Errors
Hashedld_* keys use {code, message, request_id}. JWT App Keys keep today’s detail body. See Errors.