Authentication
The MassPartner API uses API keys to authenticate requests. You can view and manage your API keys in your dashboard under Settings → API.
Your API keys carry many privileges, so be sure to keep them secure. Do not share your secret API keys in publicly accessible areas such as GitHub, client-side code, and so forth.
Authentication to the API is performed via Bearer Auth in the HTTP header:
Authorization: Bearer YOUR_API_KEYRate Limits
To ensure a stable experience for all users, API requests are rate-limited. The standard limit is 100 requests per minute per IP/API key combination. If you exceed the rate limit, the API will return a 429 Too Many Requests response.
Record a Conversion (S2S)
This endpoint is used by Brands to report a conversion via Server-to-Server (S2S) postback.
/api/tracking/s2s-postback.php
Parameters:
click_id(required): The unique click ID passed to your landing page via thesubidorclickidparameter.amount(optional): The transaction value (for revenue share campaigns).tx_id(optional): Your internal transaction ID for deduplication.
curl -X POST https://masspartner.com/api/tracking/s2s-postback.php \
-H "Authorization: Bearer sk_test_123456789" \
-H "Content-Type: application/json" \
-d '{
"click_id": "clk_8f92j3nfa92nf",
"amount": 99.99,
"tx_id": "order_789012"
}'Response (200 OK):
{
"success": true,
"message": "Conversion recorded successfully",
"conversion_id": 45192
}List Campaigns
Retrieve a list of active campaigns. If authenticated as an affiliate, this returns campaigns you are approved for.
/api/campaigns/list.php
Get Stats
Retrieve aggregated performance statistics (clicks, conversions, commissions) for a specific date range.
/api/reports/stats.php?start_date=2026-04-01&end_date=2026-04-30