Move wishlist item to cart

Atomically move a wishlist item into the customer’s cart. The variant’s stock is validated; on success the item is added to (or merged with) the cart and removed from the wishlist. Returns the refreshed cart.

POST /v1/wishlist/move-to-cart

Move wishlist item to cart

cURL

curl --request POST \
  --url https://api.tybritelabs.com/v1/wishlist/move-to-cart \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'x-auth-token: <x-auth-token>' \
  --data '
{
  "wishlist_item_id": "880e8400-e29b-41d4-a716-446655440001",
  "customer_id": "650e8400-e29b-41d4-a716-446655440000",
  "quantity": 1
}
'

200

{
  "success": true,
  "message": "Item moved from wishlist to cart",
  "removed_wishlist_item_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "items": [
    {
      "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "product_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "variant_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "product_name": "Sony WH-1000XM4",
      "variant_name": "Black",
      "variant_attributes": {
        "color": "Black"
      },
      "product_sku": "SNY-WH1002",
      "thumbnail_url": "https://pub-41977a...r2.dev/.../primary-image.jpg",
      "media": [
        {
          "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
          "url": "<string>",
          "position": 123,
          "alt_text": "<string>",
          "is_primary": true
        }
      ],
      "quantity": 2,
      "unit_price": 34999,
      "selling_price": 34999,
      "total_price": 69998,
      "stock_available": 10,
      "has_variants": true,
      "created_at": "2023-11-07T05:31:56Z",
      "updated_at": "2023-11-07T05:31:56Z"
    }
  ],
  "total_items": 123,
  "subtotal": 123,
  "session_id": "<string>",
  "customer_id": "<string>"
}

Authorizations

Authorization · string · header · required

API Key Authentication

Use your API key in the Authorization header:

Authorization: Bearer tybrite_sk_live_YOUR_KEY

Key Types:

Secret Keys (Server-Side Only):

• Format: tybrite_sk_live_* (production) or tybrite_sk_test_* (sandbox)
• Full read/write access to all endpoints
• ⚠️ NEVER expose in client-side code or public repositories
• Required for: write operations, authentication, payment verification, AI recommendations

Publishable Keys (Client-Safe):

• Format: tybrite_pk_live_* (production) or tybrite_pk_test_* (sandbox)
• Read-only access (GET requests only, plus POST semantic search)
• ✅ Safe for client-side JavaScript, mobile apps, and public code
• Allowed for: browsing products, search, CMS content, pricing queries

Endpoint-Specific Requirements:

• Authentication endpoints (/v1/auth/*): Secret key required
• Payment verification (POST /v1/payments/verify): Secret key required
• AI Recommendations (POST /v1/recommendations): Secret key required
• Semantic Search (POST /v1/search): Both key types allowed (read-only operation)
• All write operations: Secret key required
• All read operations: Both key types allowed

Using a publishable key for restricted operations returns 403 Forbidden.

Headers

x-auth-token · string · required

Customer session access_token from /v1/auth/login or /v1/auth/verify-otp. The resolved customer must match the customer_id in the request.

X-Session-Id · string

Optional session ID used to associate the resulting cart row when the customer does not already have one.

Body

application/json

wishlist_item_id · string<uuid> · required

Wishlist item UUID to move

Example:

"880e8400-e29b-41d4-a716-446655440001"

customer_id · string<uuid> · required

Customer UUID that owns the wishlist item and target cart

Example:

"650e8400-e29b-41d4-a716-446655440000"

quantity · integer · default: 1

Quantity to add to the cart (defaults to 1)

Required range: x >= 1

Example:

1

Response

200

application/json

Item moved to cart (returns refreshed cart with metadata)

success · boolean

Example:

true

message · string

Example:

"Item moved from wishlist to cart"

removed_wishlist_item_id · string<uuid>

items · object[]

Show child attributes

total_items · integer

subtotal · number

session_id · string | null

customer_id · string | null