Growwer API SDKs

Official clients for the Growwer customer API: your account, projects, orders, the media catalogue, your seller medias and orders, wallets and the managed service.

Every client here is generated from the OpenAPI contract the API itself publishes, so they say what the running service does rather than what a handwritten wrapper remembers about it. One contract, one generator run, one version: a change to the API reaches all seven languages together.

Language	Package	Version	Directory
Python 3.10+	growwer		python/
TypeScript (Node 18+, browsers)	@growwer/api		typescript/
PHP 8.1+	growwer/growwer-api-sdk		php/
Go 1.23+	github.com/viralitymedia/growwer-api-sdk/go		go/
Java 11+	com.growwer:growwer-api		java/
.NET 8	Growwer.Api		csharp/
Ruby 3.0+	growwer		ruby/

Each directory carries the generated reference for its language: one page per resource and one per model under its own docs/.

Create one on your Growwer profile page, under API keys. Name it after the integration that will use it, and pick what it may do:

The key is shown once, when you create it, and never again: Growwer stores only a fingerprint of it. Copy it then and keep it where you keep any other secret. If you lose it, revoke it and create another; a revoked key stops working at once.

Send it as a bearer token on every request: Authorization: Bearer <key>.

getMe returns the account the key belongs to: its wallet balances, its seller status and its daily catalogue quota. It is the quickest way to confirm a key works.

Every client already points at https://tool.growwer.com. The examples show where to change that, for instance to call another host.

import os

from growwer import ApiClient, Configuration
from growwer.api import AccountApi, BuyerOrdersApi

config = Configuration(
    host="https://tool.growwer.com",  # optional: this is the default
    access_token=os.environ["GROWWER_API_KEY"],
)

with ApiClient(config) as client:
    me = AccountApi(client).get_me()
    print(me.email, me.buyer.balance.available.amount, me.buyer.balance.available.currency)

    page = BuyerOrdersApi(client).list_orders(limit=100)
    print(f"{len(page.items)} of {page.total} orders")

import { Configuration, AccountApi, BuyerOrdersApi } from "@growwer/api"

const config = new Configuration({
  basePath: "https://tool.growwer.com", // optional: this is the default
  accessToken: process.env.GROWWER_API_KEY,
})

const me = await new AccountApi(config).getMe()
console.log(me.email, me.buyer.balance.available.amount)

const page = await new BuyerOrdersApi(config).listOrders({ limit: 100 })
console.log(`${page.items.length} of ${page.total} orders`)

import (
	"context"
	"os"

	growwer "github.com/viralitymedia/growwer-api-sdk/go"
)

config := growwer.NewConfiguration()
// Optional: this is the default.
config.Servers = growwer.ServerConfigurations{{URL: "https://tool.growwer.com"}}
client := growwer.NewAPIClient(config)

ctx := context.WithValue(context.Background(), growwer.ContextAccessToken, os.Getenv("GROWWER_API_KEY"))
me, _, err := client.AccountAPI.GetMe(ctx).Execute()

use Growwer\Api\Api\AccountApi;
use Growwer\Api\Configuration;

$config = Configuration::getDefaultConfiguration()
    ->setHost('https://tool.growwer.com') // optional: this is the default
    ->setAccessToken(getenv('GROWWER_API_KEY'));

$me = (new AccountApi(new GuzzleHttp\Client(), $config))->getMe();

require "growwer"

Growwer.configure do |config|
  config.host = "tool.growwer.com" # optional: this is the default
  config.access_token = ENV.fetch("GROWWER_API_KEY")
end

me = Growwer::AccountApi.new.get_me

import com.growwer.api.ApiClient;
import com.growwer.api.api.AccountApi;

ApiClient client = new ApiClient();
client.setBasePath("https://tool.growwer.com"); // optional: this is the default
client.setBearerToken(System.getenv("GROWWER_API_KEY"));

var me = new AccountApi(client).getMe();

using Growwer.Api.Api;
using Growwer.Api.Client;

var config = new Configuration
{
    BasePath = "https://tool.growwer.com", // optional: this is the default
    AccessToken = Environment.GetEnvironmentVariable("GROWWER_API_KEY"),
};

var me = new AccountApi(config).GetMe();

No code written for 1.1.0 breaks. The contract changes only in what the API documents and in one error a method can now return:

• Catalogue daily cap. The cap now counts units, not only distinct medias: each new media still costs one, and a catalogue response that holds no new media, an empty page or a total read included, costs one unit. Repeating a request already answered the same UTC day is free while the project's media lists, topics and language stay as they were. countSavedFilterMedias is now subject to the catalogue access and the cap, so it can answer 403 (no catalogue access) and 429 catalogue_daily_cap_reached; the first count of a filter in a UTC day costs one unit.
• URLs without < or >. The post URL of deliverSellerOrder and deliverSellerOrderUpdate and the briefing.linkingFrom of a link addition order are refused with a 422 when they contain < or >.
• Proposals summary PDF. getManagedServiceProposalsSummary renders one summary per user at a time; a request while another is being rendered gets 429 proposals_summary_in_progress, to retry after Retry-After.

Some code written for 1.0.2 breaks even though this is a minor version: constructor calls, a SellerMedia built by hand, and in Java and C# two runtime changes that come with the partial update fix below:

• Go: NewUpdateSellerMediaRequestPostOffer now takes no arguments, because postOffer.pricingOptions is optional in an update. Other constructors gain required parameters: NewSellerMedia gains typology; NewSellerMediaPostOffer gains maximumLinks, advertisingLabellingPolicy and promotedSocialNetworks; NewProjectCatalogueMediaAllOfProject gains aiKeywords.
• C#: the UpdateSellerMediaRequest constructor now takes typology first, so a positional call no longer compiles; name the arguments. The SellerMedia constructor inserts typology after url, and SellerMediaPostOffer inserts maximumLinks, advertisingLabellingPolicy and promotedSocialNetworks before extraServices.
• C# nulls passed to a constructor: a null passed as a constructor argument is no longer sent, so new UpdateSellerMediaRequest(postOffer: p, linkAdditionOffer: null) now keeps link additions and new UpdateProjectRequest(name: null) keeps the name. To send null, assign the property: LinkAdditionOffer = null, Name = null.
• Java null lists and maps: every list and map property now starts as null instead of an empty container, so code that reads one without a null check, such as err.getDetails().isEmpty() or new UpdateProjectRequest().getTopics().add(12), throws a NullPointerException. Use the add...Item methods, which create the list.
• Python and Ruby: a SellerMedia or catalogue media built without the new required fields (typology, the post offer's new fields, project.aiKeywords), as test mocks often are, now fails validation. TypeScript: such an object literal no longer type-checks.

What changes:

• Register and delete your medias. SellerMediasApi adds createSellerMedia (POST /seller/medias) and deleteSellerMedia (DELETE /seller/medias/{id}). A media registered already is refused with 409 media_already_registered, and those refusals count toward a daily limit (429 media_duplicate_limit_reached). A delete is refused with 409 media_has_active_orders, listing details.orderIds, while any order on the media is not finished. There is no batch operation: to register many medias, call createSellerMedia once per media, each with its own Idempotency-Key.
• More of the offer is editable. Seller medias add typology in listSellerMedias, getSellerMedia, createSellerMedia and updateSellerMedia. They also add postOffer.maximumLinks, postOffer.advertisingLabellingPolicy and postOffer.promotedSocialNetworks. updateSellerMedia no longer requires postOffer.pricingOptions, so a post offer update can change any of those fields alone.
• AI keywords in a project. Each media of searchProjectMedias adds project.aiKeywords, the AI keywords the web lists for the media in the project, each with its source (googleAiOverview, chatgpt, googleAiMode, or null). An entry does not mean the engine cited the media.
• A partial update no longer erases what it leaves out. Java's updateSellerMedia sent postOffer.promotedSocialNetworks and extraServices as empty lists when they were not set, which cleared them, and its updateProject sent empty topics, promotedProducts and userKeywords, so a partial project update was refused with a 422. In C#, every request sent each optional, nullable property left unset as null, which the API reads as a value. A project rename alone set the country to worldwide, and a seller media update without LinkAdditionOffer stopped link additions. Both now send only what was set, and C# still sends a null you assign (Country = null).
• Java models start with null lists and maps. To fix the update above (containerDefaultToNull in sdks.json), every list and map property in Java now starts as null instead of an empty container, in responses and in the models you build. Error.getDetails() returns null when an error carries no details, so check it before reading it; every other list in a response is required, so the API always sends it. On a model you build, the add...Item methods create the list, and a required list left unset is left out of the request rather than sent as [].
• The request's sub-objects keep their 1.0.2 class names, which createSellerMedia reuses: UpdateSellerMediaRequestExtraServicesInner, UpdateSellerMediaRequestLinkAdditionOffer, UpdateSellerMediaRequestLinkAdditionOfferPricingOptionsInner and UpdateSellerMediaRequestPostOfferPricingOptionsInner. See "Inline class names" under Regenerating.

Four API classes are renamed, and code that imports the old names breaks, although the version is a patch. The contract now groups its operations by role (general, buyer, seller). Each generated class is still named after its tag, and the tags that were ambiguous now name the role. The operations, their methods and their models are unchanged; only the class that holds them moved:

The names follow each language's casing: client.BuyerOrdersAPI in Go, Growwer::BuyerOrdersApi in Ruby, BuyerOrdersApi everywhere else, with the Python module growwer.api.buyer_orders_api.

Also in this release:

• Python 3.10 or later is required, and the dependency floors rise for security fixes: urllib3 >= 2.8.0, and for development pytest >= 9.0.3 and filelock >= 3.20.3.
• Catalogue trial quota. An account without a recent completed order reads the catalogue within a daily trial quota instead of 403 catalogue_requires_recent_order, and GET /me adds catalogue.dailyCap and catalogue.remainingToday. 429 catalogue_daily_cap_reached adds details.limit and details.tier. See The catalogue.
• Failed authentications are throttled per key and address, under a per-address ceiling, so one bad key no longer blocks the other keys from its address. See Rate limits.
• At most 20 pending uploads, past which uploadFile answers 429 file_limit_reached. See Uploaded files.
• requestId is documented as a UUID v4 generated per request, or the X-Request-Id you sent.

These hold in every language. The per-language docs cover the signatures; this is what the signatures cannot say.

Every response carries an X-Request-Id header, and every refusal answers the same envelope with that id in requestId. Quote it when you report a problem and it identifies your exact request.

{
  "code": "insufficient_balance",
  "message": "The available balance of your wallet does not cover the price of this order. Nothing was charged. Add funds to your wallet and retry.",
  "requestId": "0b8f6c2e-4a1d-4f3b-9c7e-5d2a8e1f6b34",
  "details": {
    "required": { "amount": 9000, "currency": "EUR" },
    "available": { "amount": 2500, "currency": "EUR" },
    "missing": { "amount": 6500, "currency": "EUR" }
  }
}

code is stable and machine-readable; branch on it. message is for people and may change. details appears on some errors only — the invalid fields of a 422 validation_failed, the shortfall of a 409 insufficient_balance — as each operation's responses describe.

In Python the common statuses raise their own subclass of ApiException: BadRequestException (400), UnauthorizedException (401), ForbiddenException (403), NotFoundException (404), ConflictException (409), UnprocessableEntityException (422) and ServiceException (5xx). They live in growwer.exceptions, not at the top level of the growwer package, and data holds the parsed envelope whenever the operation documents that status:

from growwer.exceptions import ApiException, BadRequestException

try:
    ...
except BadRequestException as error:
    print(error.data.code, error.data.message, error.data.request_id)
except ApiException as error:
    print(error.status, error.headers.get("X-Request-Id"))

Header names are case-insensitive, so look them up that way. This matters in C#: .NET rewrites the header names it knows, so X-Request-Id arrives as X-Request-ID, and the client's Multimap of response headers compares names exactly:

catch (ApiException e)
{
    var requestId = e.Headers
        .Where(h => string.Equals(h.Key, "X-Request-Id", StringComparison.OrdinalIgnoreCase))
        .SelectMany(h => h.Value)
        .FirstOrDefault();
}

PHP's ApiException::getResponseHeaders() is a plain array keyed in the case the server sent, which over HTTP/2 is lower case; compare names case-insensitively there too.

600 requests per user, across all of that user's keys, and 300 per key, in fixed windows of 60 seconds. The per-user ceiling is the real one: issuing more keys divides the same budget rather than adding to it.

Every response reports the tighter of the two windows in X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset (seconds until it refills). A request beyond either answers 429 rate_limit_exceeded with a Retry-After header in seconds. Honour it:

import time

from growwer.exceptions import ApiException


def with_backoff(call, attempts=3):
    for attempt in range(attempts):
        try:
            return call()
        except ApiException as error:
            code = getattr(error.data, "code", None)
            if error.status != 429 or code != "rate_limit_exceeded" or attempt == attempts - 1:
                raise
            time.sleep(int(error.headers.get("Retry-After", "1")))

Retry only rate_limit_exceeded automatically. Other refusals answer 429 too, and retrying them does not help: file_limit_reached waits for a file to expire, catalogue_daily_cap_reached and managed_service_request_limit_reached wait for the next UTC day, and retrying too_many_failed_authentications with the same key only keeps it refused. Branch on code for those.

Failed authentications are counted per address and presented key: 10 failures in 15 minutes with one key from one address refuse that key from that address with 429 too_many_failed_authentications and a Retry-After header, so one bad key does not lock out the other keys used from the same address. An address also has a ceiling of 300 failed authentications in 15 minutes across all keys, past which every further failure from it answers that 429 instead of 401. A valid key always passes. When the rate limiter itself cannot be reached, the API refuses the call with 503 rate_limit_unavailable rather than serving it unmetered; retry later.

Every write requires an Idempotency-Key header: 1 to 255 printable ASCII characters without spaces (! to ~); any other key answers 400 invalid_idempotency_key. A UUID is the obvious choice. Use a new key for each operation and reuse it only to retry that same operation. Keys belong to your account, not to one API key.

import uuid

from growwer.api import ProjectsApi
from growwer.models import CreateProjectRequest

ProjectsApi(client).create_project(
    idempotency_key=str(uuid.uuid4()),
    create_project_request=CreateProjectRequest(
        root_url="https://www.example.com",
        website_type="ecommerce",
        topics=[3],
        language="es",
        promoted_products=["running shoes", "trail shoes", "socks", "insoles", "gaiters"],
    ),
)

Generate the key outside your retry loop. A fresh key per attempt is the same as having no idempotency at all.

• A successful write is stored for 30 days. A retry with the same key and the same request replays its response with Idempotent-Replayed: true and does nothing again.
• A refused write (4xx) has no effect and releases its key. Fix the cause and retry with the same key: the write runs.
• A failed write (5xx) may have taken effect, so it is never run again under its key: a retry answers 409 idempotency_outcome_unknown. Check whether it took effect before retrying with a new key.
• A retry while the first request is still running answers 409 idempotency_request_in_progress. A request still running after 5 minutes is treated as failed: a retry answers 409 idempotency_outcome_unknown.
• The same key with a different request — method, path, query or body — answers 409 idempotency_key_reused rather than the wrong operation. A write without the header answers 400 idempotency_key_required.

Independently of the idempotency key, placing the same order — same project, media, type and price — again within 5 seconds of one still in progress is refused with 409 duplicate_order, and nothing is charged. details.orderId is the earlier order, or null when that order has finished or was deleted since.

Estimate an order first (estimateOrder) and send the price it answers as expectedPrice: the order is placed only at that price.

A file uploaded with uploadFile can be used by one write and expires 24 hours after its upload. You may hold at most 20 pending files: uploaded, not yet used by a write and not expired. Another upload past them answers 429 file_limit_reached, with details.limit the number you may hold and Retry-After the seconds until the oldest of them expires. Use one of your pending files in a write, which frees its place at once, or wait. A file refused as invalid (422) is refused before the files are counted, and a refused upload stores nothing.

Listings take limit (default 20, maximum 100) and offset, and answer {items, total}. A limit above the maximum is refused with 422 validation_failed, never quietly clamped, so the page you asked for is the page you get. total counts everything the filter matches, not the size of the page.

Orders are polled, not pushed. Call GET /orders (or GET /seller/orders for the orders on your medias) with sort=updatedAt and updatedSince set to the updatedAt of the last order you saw: an order moves to the end of that list each time it changes state. updatedAt changes on state changes only.

Money is an object of integer cents and a currency code — {"amount": 9000, "currency": "EUR"} is 90.00 EUR — never a float. Dates and date-times are ISO-8601. A date-time sent in a query string carries its offset, and its + must be sent as %2B.

The catalogue operations (searching a project's medias, flash offers, media details) show each account a limited number of distinct medias per UTC day; medias seen again the same day are free. Accounts with recent completed orders, as buyer or as seller, get the full daily cap of 5,000. Other accounts get a trial quota of 100 distinct medias per UTC day instead of a refusal, and it rises to the full cap after a completed order. A media you have ordered is always readable with GET /medias/{id} and counts against neither.

GET /me reports where you stand:

• catalogue.eligible: whether you have the full cap.
• catalogue.dailyCap: the distinct medias you may see per UTC day, the full cap or the trial quota.
• catalogue.remainingToday: how many new medias still fit today, or null when the count cannot be read right now; the catalogue operations then answer 503 until it can.

A response that would go beyond the cap answers 429 catalogue_daily_cap_reached: details.remaining says how many new medias still fit today, details.limit is the daily cap that applied and details.tier is full or trial; Retry-After is the time to the next UTC midnight, and medias already seen today stay readable. 403 catalogue_requires_recent_order is left only for when the trial quota is turned off (catalogue.dailyCap is 0) and the account has no recent completed order.

The managed service requests are capped per UTC day too, at 5 of each kind: 429 managed_service_request_limit_reached, with Retry-After the time to the next UTC midnight.

The API adds fields to its responses without a new version. Every client here ignores a response field it does not know, so a client generated today keeps reading tomorrow's responses. The offline fixture tests under tests/ prove it for each language on every change.

Known limitation: enum values. A new value in an existing enum field is not tolerated everywhere. The Python, PHP, Java, C# and Ruby clients refuse a value they were not generated with, and the whole response fails to deserialise. Go and TypeScript hold enum fields as plain strings and pass a new value through. The generator's enumUnknownDefaultCase option would map unknown values to a sentinel instead; it is not enabled. Upgrade to the release that follows an enum change before the API starts sending the new value to you.

./generate.sh                # every SDK, from the committed openapi.json
./generate.sh python go      # only these
./generate.sh --sync         # fetch the live contract first, then regenerate everything

Requires Docker and Python 3. Everything inside each language directory is generated and must not be edited by hand — the next run discards it. Adding a language is one entry in sdks.json.

--sync reads the contract from contractUrl in sdks.json, or from GROWWER_CONTRACT_URL when it is set. The URL goes to curl, so a contract dumped to disk is synced with a file URL:

GROWWER_CONTRACT_URL=file:///absolute/path/openapi.json ./generate.sh --sync

The fetch is opt-in because a regeneration that silently pulls a new contract turns a mechanical rerun into a content change nobody reviewed, and the diff runs to six figures of lines across seven languages — the one place a surprise must not hide. A fetched contract with fewer than 60 operations is refused rather than written: it is far more likely to be a misrouted response than a real change.

--sync writes the contract in the layout of the committed openapi.json — two-space indent, UTF-8 left unescaped, a trailing newline — so the diff it leaves is only what the contract changed. It is written with Python's json module, which would differ from jq in two cases the contract does not contain: U+007F (DEL) is written raw where jq escapes it, and a number literal is rewritten in Python's form (1e3 becomes 1000.0, 1.50 becomes 1.5).

The generator never deletes a file it no longer emits, so after each language is generated the script deletes every file the previous .openapi-generator/FILES listed and the new one does not. Three kinds of listed path are kept, because their absence from the new list does not mean the contract dropped them:

• Test stubs, except Go's. The generator writes a stub only when it is missing and lists it only on the run that writes it, so a stub added in one run is gone from the next run's list. Nothing under the directory named by the SDK's testStubDir in sdks.json is deleted (python/test/, php/test/, java/src/test/, csharp/src/Growwer.Api.Test/, ruby/spec/), so when the contract drops a schema or operation its stub has to be deleted by hand. Go is generated into an empty directory, so its stubs are written and listed on every run and are removed with the rest; TypeScript has none. For the same reason, after a contract change that adds a schema or operation, run the script twice before committing: the first run lists the new stubs in .openapi-generator/FILES and the second drops them again, which is the list CI expects.
• .openapi-generator-ignore, which the generator likewise writes only when it is missing.
• Any path the target's .openapi-generator-ignore names: the generator stopped writing it because it is now maintained by hand. Go's empty output directory gets a copy of go/.openapi-generator-ignore before each run, so the file works there as it does elsewhere.

These corrections are applied by the generator script rather than by hand, because a hand edit would be discarded on the next run:

• Go has no package registry, so the import path is the repository URL plus the directory. The generator derives the module path from the Go package name, and go is a keyword, so it cannot produce .../growwer-api-sdk/go on its own.
• Go's oneOf template writes its no-match branch twice in a row, and go vet rejects the second copy as unreachable code. The copy is dropped by scripts/go-oneof-unreachable.py.
• C#'s model template makes an enum property nullable only when it is optional, ignoring nullable: true, so the null the contract allows in a required enum such as Order.pendingAction would fail deserialisation. The ? is added by scripts/csharp-nullable-enums.py.
• C#'s model template also writes an optional, nullable property whenever it is null, so every request would send each one left unset as null, which the API reads as a value. Each optional, nullable property of a request body, read from the contract, gets a flag that its setter raises and a ShouldSerialize method that Newtonsoft.Json consults; a constructor argument raises the flag only when it is not null. This is done by scripts/csharp-optional-nullables.py. The generator's conditionalSerialization option would do the same, but it never marks a required constructor argument as set, so it would drop every required property.
• Inline class names. The generator gives identical inline schemas one class, named after the first operation that uses it, so an operation added before one that already had the shape would rename its class and break every client that names it. inlineSchemaNameMappings in sdks.json pins the published name, keyed by the generator's operation-based name (createSellerMedia_request_linkAdditionOffer), and is passed as --inline-schema-name-mappings.
• Package metadata. Left alone, the Python, TypeScript and PHP manifests name OpenAPI Generator as their author and carry its description and keywords. They are rewritten from sdks.json by scripts/package-metadata.py, which also sets the PHP package name and raises the Python dependency floors (Python, urllib3, pytest and filelock) past the releases with open advisories, since Dependabot cannot update a project with neither a lockfile nor a pinned version.

The template fixes fail the run when they find nothing left to correct, so a generator upgrade that makes one obsolete removes it rather than leaving a silent no-op.

• openapi.json — the contract every client here is generated from
• Live contract and browsable reference

A vX.Y.Z tag runs release.yml. It checks that the tag equals packageVersion in sdks.json and that regenerating leaves no diff, then publishes to npm, PyPI, Maven Central, NuGet and RubyGems, and pushes the go/vX.Y.Z tag the Go module proxy resolves. Packagist picks the tag up through its webhook.

No release happens before the committed contract matches production. Before each tag, ./generate.sh --sync against production must leave no diff; release.yml only checks the committed clients against the committed contract.

An owner sets the registries up once, before the first tag:

• npm: the growwer organisation, and an automation token with publish rights on @growwer/api stored as the repository secret NPM_TOKEN.
• PyPI: a trusted publisher for the growwer project naming this repository, the workflow release.yml and the environment release.
• NuGet: a trusted publishing policy for Growwer.Api naming this repository, release.yml and the environment release, and the nuget.org account it was created under stored as the repository variable NUGET_USER (a variable, not a secret).
• RubyGems: a push key for the growwer gem stored as the repository secret RUBYGEMS_API_KEY.
• Maven Central: the Sonatype Central namespace com.growwer, verified with a DNS TXT record on growwer.com, and the repository secrets MAVEN_CENTRAL_USERNAME, MAVEN_CENTRAL_PASSWORD, MAVEN_GPG_PRIVATE_KEY and MAVEN_GPG_PASSPHRASE.
• Packagist: submit this repository as growwer/growwer-api-sdk, and add Packagist's GitHub webhook so new tags are picked up.
• Go: nothing. The module proxy resolves the go/vX.Y.Z tag the workflow pushes.
• The GitHub environment release, which every publishing job runs in.

MIT. See LICENSE.