Fyndare API

curl -H "Authorization: Bearer YOUR_API_KEY" \
  https://fyndare.se/api/v1/me

Authorization: Bearer fyn_live_abc123...

{
  "success": true,
  "data": { ... },
  "meta": {
    "requestId": "req_a1b2c3d4e5f6",
    "timestamp": "2026-02-15T14:30:00.000Z"
  }
}

{
  "success": true,
  "data": [ ... ],
  "pagination": {
    "page": 1,
    "limit": 20,
    "total": 150,
    "pages": 8,
    "hasMore": true
  },
  "meta": { ... }
}

{
  "success": false,
  "error": {
    "code": "VALIDATION_ERROR",
    "message": "Title must be at least 5 characters",
    "details": [
      { "field": "title", "message": "Title must be at least 5 characters" }
    ]
  },
  "meta": { ... }
}

{
  "success": true,
  "data": {
    "total": 3,
    "created": 2,
    "failed": 1,
    "results": [
      { "index": 0, "success": true, "data": { "id": "clxx..." } },
      { "index": 1, "success": true, "data": { "id": "clxy..." } },
      { "index": 2, "success": false, "error": { "code": "VALIDATION_ERROR", "message": "Price is required" } }
    ]
  }
}

{
  "event": "listing.sold",
  "deliveryId": "del_abc123",
  "timestamp": "2026-02-15T14:30:00.000Z",
  "data": {
    "id": "clxx123",
    "externalId": "INV-001",
    "soldAt": "2026-02-15T14:30:00.000Z"
  }
}

X-Fyndare-Event: listing.sold
X-Fyndare-Delivery: del_abc123
X-Fyndare-Signature: sha256=abc123...
X-Fyndare-Timestamp: 1708012345

const crypto = require("crypto");

function verifyWebhook(secret, timestamp, body, signature) {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(timestamp + "." + body)
    .digest("hex");
  return signature === "sha256=" + expected;
}

// In your handler:
const sig = req.headers["x-fyndare-signature"];
const ts = req.headers["x-fyndare-timestamp"];
const isValid = verifyWebhook(WEBHOOK_SECRET, ts, JSON.stringify(req.body), sig);

import hmac, hashlib

def verify_webhook(secret, timestamp, body, signature):
    message = f"{timestamp}.{body}"
    expected = hmac.new(secret.encode(), message.encode(), hashlib.sha256).hexdigest()
    return signature == f"sha256={expected}"

curl -X POST https://fyndare.se/api/v1/listings \
  -H "Authorization: Bearer fyn_live_..." \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: unique-key-123" \
  -d '{
    "title": "Volvo V60 2019",
    "description": "Välskött familjebil med full servicehistorik...",
    "price": 259000,
    "condition": "GOOD",
    "categorySlug": "fordon-bilar",
    "locationLan": "vastra-gotalands-lan",
    "locationKommun": "goteborg"
  }'

const API_KEY = "fyn_live_...";
const BASE = "https://fyndare.se/api/v1";

async function createListing(data) {
  const res = await fetch(`${BASE}/listings`, {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify(data),
  });
  return res.json();
}

// Create
const { data: listing } = await createListing({
  title: "Volvo V60 2019",
  description: "Välskött familjebil...",
  price: 259000,
  condition: "GOOD",
  categorySlug: "fordon-bilar",
  locationLan: "vastra-gotalands-lan",
  locationKommun: "goteborg",
});
console.log("Created:", listing.id);

// List
const res = await fetch(`${BASE}/listings?page=1&limit=10`, {
  headers: { "Authorization": `Bearer ${API_KEY}` },
});
const { data: listings } = await res.json();

// Mark as sold
await fetch(`${BASE}/listings/${listing.id}/sold`, {
  method: "POST",
  headers: { "Authorization": `Bearer ${API_KEY}` },
});

import requests

API_KEY = "fyn_live_..."
BASE = "https://fyndare.se/api/v1"
HEADERS = {
    "Authorization": f"Bearer {API_KEY}",
    "Content-Type": "application/json",
}

# Create listing
resp = requests.post(f"{BASE}/listings", headers=HEADERS, json={
    "title": "Volvo V60 2019",
    "description": "Välskött familjebil...",
    "price": 259000,
    "condition": "GOOD",
    "categorySlug": "fordon-bilar",
    "locationLan": "vastra-gotalands-lan",
    "locationKommun": "goteborg",
})
listing = resp.json()["data"]
print(f"Created: {listing['id']}")

# List
resp = requests.get(f"{BASE}/listings", headers=HEADERS)
listings = resp.json()["data"]

# Mark as sold
requests.post(f"{BASE}/listings/{listing['id']}/sold", headers=HEADERS)

// Sync your full inventory using the upsert pattern
for (const item of inventory) {
  await fetch(
    `${BASE}/listings/by-external-id/${item.sku}`,
    {
      method: "PUT",
      headers: {
        "Authorization": `Bearer ${API_KEY}`,
        "Content-Type": "application/json",
      },
      body: JSON.stringify({
        title: item.name,
        description: item.description,
        price: item.price,
        condition: "NEW",
        categorySlug: item.category,
        locationLan: "vastra-gotalands-lan",
        locationKommun: "goteborg",
      }),
    }
  );
}

// Mark sold items
const soldIds = inventory
  .filter(i => i.sold)
  .map(i => i.fyndareId);

if (soldIds.length > 0) {
  await fetch(`${BASE}/listings/bulk/sold`, {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ ids: soldIds }),
  });
}