The following topics are covered:

Your API URL is the base URL for your API. It is normally in the following 2 formats:

You can find your API url by sending a GET request to

For all the examples in this documentation, you need to replace the API url with your own.

Your API token is needed to access the API. It works as the "password" to access the API.

Your API token can be found by logging into your Imonggo account, click on the "My Info" link on the upper-right, and then click on the "Show" under "API token". Please note that the "API token" section will only be shown if API Interface is enabled (from Control Center > Premium Features).

It is also possible to retrieve the API token programmatically by passing your email and password.

Please refer to Token API article for more information.

Authentication is managed using HTTP basic authentication. Every request must include the Authorization HTTP header. Use your API token as the username, and "X" (or some otherwise bogus text) as the password (only the API token is used for authenticating API requests).

The example below shows you how you can access a list of products using Linux curl command utility.

Be sure to set both the 'Content-Type' and 'Accept' headers to 'application/xml' to identify the request and response format.

If a request succeeds, it will return a status code in the 200 range and often, an XML-formatted response.

Note that in general, if a request causes a new record to be created, the response will use the "201 Created" status. Any other successful operation (like a successful query, delete, or update) will return a 200 status code.

If a request fails, a non-200 status code will be returned, possibly with error information in XML format as the response's content.

You can perform up to 500 requests per hour for the same account. If you exceed this limit, you'll get a 503 response for subsequent requests.

You can use either plain HTTP or HTTPS with Imonggo. For security purpose, we recommend that you use HTTPS.

It is important to understand that Imonggo currently does not distinguish user roles in API. Anyone regardless the role (cashier, supervisor, manager or owner) who has the API token has access to entire API. It is up to the application to implement application level restrictions.

When communicating with the server, you should use UTC date and time format (YYYY-MM-DDTHH:HH:SSZ). Although server is smart enough to parse other date formats, it is recommended that you use UTC date format to ensure future compatibility.

When passing boolean fields server, Imonggo accepts both "true" and "1" as true and "false" and "0" as false.

All text fields have maximum width as indicated in the documentation. If you submit to the server a string with length more than the maximum width, the excess is truncated without any warning.