Connected marketplace accounts

GET

/marketplaces

const url = 'https://api.flotera.com/api/v1/marketplaces';
const options = {
  method: 'GET',
  headers: {cookie: '__Host-erm_session=<__Host-erm_session>'}
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://api.flotera.com/api/v1/marketplaces \
  --cookie __Host-erm_session=<__Host-erm_session>

One entry per connected marketplace. The API key itself is never returned in any form: only a digest, so the panel can tell “the same key” from “a new key” without ever holding the value.

Authorizations

sessionCookie
pat

Responses

200

Marketplace accounts.

application/json

object

accounts

required

Array<object>

<= 8 items

object

marketplace

required

Supported marketplace. The database constrains the same two values, so a third one is a migration rather than a new string.

string

Allowed values: vast clore

status

required

invalid_key is set only when the marketplace rejected the key. A network failure, a 5xx or a missing permission group leave the status alone — otherwise the customer would be told to reconnect a marketplace that is working.

string

Allowed values: connected invalid_key disconnected

external_account_id

How the marketplace identifies the account owner.

string | null

<= 128 characters

external_username

string | null

<= 256 characters

credential_digest

Hash of the stored key. Lets the panel tell “the same key” from “a new key” without ever holding the value. The key itself is never returned by any endpoint, in any form.

string | null

<= 64 characters

validated_at

RFC 3339 UTC with microsecond precision, or null.

string | null format: date-time

last_error

Why the last sync failed. Survives until the next success, because it is the only explanation the customer gets for a stalled sync.

string | null

<= 512 characters

last_error_at

RFC 3339 UTC with microsecond precision, or null.

string | null format: date-time

clore_poh_balance

CLORE held in Proof of Holding by this account. The holding cuts the marketplace’s base share in steps, so what a MACHINE is charged depends on this fact about the ACCOUNT. Null means UNREAD, not zero. Zero is a measured “nothing held”, and the full share follows from it; null leaves open that the share is half of what is shown. A reader that treats them alike quotes the owner someone else’s price for their own machine. Only one number leaves the account snapshot, never the snapshot itself — the owner’s wallets live there too. Always null on Vast, which has no such mechanism.

string | null

<= 40 characters /^[0-9]+(\.[0-9]+)?$/

Example

{
  "accounts": [
    {
      "marketplace": "vast",
      "status": "connected"
    }
  ]
}

401

Missing/invalid credentials (code=unauthorized).

application/problem+json

RFC 9457 problem document with a stable machine code.

object

type

required

string format: uri

title

required

string

<= 256 characters

status

required

integer

>= 100 <= 599

code

required

Stable machine-readable error code (03 §2.4).

string

Allowed values: unauthorized forbidden csrf_rejected not_found conflict idempotency_conflict validation_failed rate_limited payload_too_large unsupported_agent_version temporarily_unavailable offline_queue_full online_queue_full plan_required server_limit_reached feature_not_entitled account_in_grace account_frozen payment_pending payment_expired payment_amount_mismatch change_already_pending change_already_applied change_effective reserve_not_covered direction_changed

detail

string

<= 2048 characters

instance

string

<= 512 characters

request_id

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

errors

Array<object>

<= 100 items

object

path

required

JSON Pointer to the offending field.

string

<= 512 characters

code

required

string

<= 64 characters

Example

{
  "type": "https://ermeon.com/problems/validation",
  "code": "unauthorized"
}

403

Authenticated but not permitted. code=forbidden — role/scope mismatch; code=feature_not_entitled — the plan does not include the capability; code=account_frozen — the account is frozen and this operation is declared x-ermeon-frozen: deny. The three are deliberately distinct: only the last one is fixed by a top-up (13 §5.6).

application/problem+json

RFC 9457 problem document with a stable machine code.

object

type

required

string format: uri

title

required

string

<= 256 characters

status

required

integer

>= 100 <= 599

code

required

Stable machine-readable error code (03 §2.4).

string

detail

string

<= 2048 characters

instance

string

<= 512 characters

request_id

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

errors

Array<object>

<= 100 items

object

path

required

JSON Pointer to the offending field.

string

<= 512 characters

code

required

string

<= 64 characters

Example

{
  "type": "https://ermeon.com/problems/validation",
  "code": "unauthorized"
}

503

A dependency the endpoint needs is not configured or is temporarily unavailable (code=unavailable). The rest of the API keeps working — an absent external integration must not take the service down.

application/problem+json

RFC 9457 problem document with a stable machine code.

object

type

required

string format: uri

title

required

string

<= 256 characters

status

required

integer

>= 100 <= 599

code

required

Stable machine-readable error code (03 §2.4).

string

detail

string

<= 2048 characters

instance

string

<= 512 characters

request_id

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

errors

Array<object>

<= 100 items

object

path

required

JSON Pointer to the offending field.

string

<= 512 characters

code

required

string

<= 64 characters

Example

{
  "type": "https://ermeon.com/problems/validation",
  "code": "unauthorized"
}