Bearer keys, prefixed ULIDs, cursor pagination, idempotency on every mutation, signed webhooks. Learn it once for SK Catalog; it holds across all of Softknack.
Catalog is API/webhook/MCP-first — a system of record, deliberately not a storefront. Read items, subscribe to price changes, and expose semantic search to your agents over MCP.
Get a test key, make one authenticated call, and listen for the webhook. The same three moves work for every endpoint in the suite.
Test and live keys are separate environments. Build against sk_test_ without touching a real customer.
One authenticated POST with an idempotency key. Same key + same body always returns the same result.
A signed item.created event hits your endpoint — verify the HMAC, act on it, return 200.
curl -X POST https://api.softknack.com/catalog/v1/items \ -H "Authorization: Bearer sk_live_..." \ -H "Idempotency-Key: 9f2c-4d1a-...-e7b3" \ -H "Content-Type: application/json" \ -d '{ "name": "AC Service - 1.5T Split", "type": "service", "duration_min": 60, "price": { "inr": 1499 } }'
Signed with HMAC-SHA256, delivered at-least-once, retried on a fixed schedule, and replayable from a dead-letter queue. You will never miss an event because a deploy was mid-flight.
| Event | When it fires |
|---|---|
item.created | A new product or service enters the record. |
item.updated | Field-level diff — prices, attributes, availability. |
item.deactivated | Deactivate-only: history and references never break. |
price.changed | The event your quotes and agents re-read on. |
variant.added | A new size/colour/capacity. |
item.restocked | Linked inventory crossed back above zero. |
The platform conventions every SK product obeys — learn them once, rely on them everywhere.
Every mutation takes an Idempotency-Key. Same key + body returns the original result; a conflicting body gets 409.
Sortable, debuggable IDs like itm_01J9X... — you can read the type and the time right off the wire.
Stable cursors that never skip or repeat a row when data changes mid-list. No page-offset drift.
Isolation enforced in the database. 404-over-403, so the existence of another tenant's record never leaks.
HMAC-SHA256 on every delivery, with the full retry schedule and dead-letter replay above.
The OpenAPI spec is generated from the code's validators and checked in CI — the docs can't lie.
This is the headless promise: read and write the catalog over REST, react to price.changed over webhooks, and expose semantic search to any agent over MCP with scoped permissions — the exact tools SUKI and SK Chat use to answer 'do you have it?'.
Hit the semantic search endpoint with a natural-language query and get matched items with live price and stock — build it into your own app, kiosk, or agent.
Auth, errors, pagination, every endpoint and schema — written once for the platform, shared by every product.
docs.softknack.com/catalog See pricing →