Allegro Browser SDK API
Endpoints used by the Allegro Browser SDK. Authenticated via JWT bearer tokens.
- Base URL
- https://{tenant}.allegrocdp.com/api
- Auth
- Bearer JWT
- Endpoints
- 31 in 21 groups
- Version
- OpenAPI 3.1
Authentication
Every request carries the reader’s session JWT, which the Browser SDK obtains and refreshes for you. If you call these endpoints yourself, send that token in the Authorization header.
How session tokens workhttp
GET /api/entitlementsHost: {tenant}.allegrocdp.comAuthorization: Bearer eyJhbGciOiJSUzI1NiIs…
Endpoint groups
- AudienceEntitlement2 endpointsList Active Entitlements · Entitlement Check
- AudienceExternalProfile1 endpointGet a single external profile for the authenticated audience member by provider
- Checkout1 endpointInitiate Checkout
- CheckoutToken1 endpointExchange Purchase Token
- Event1 endpointCreate Event
- Form2 endpointsGet Form · Submit Form
- Heartbeat1 endpointRecord Heartbeat
- IdentifySession1 endpointIdentify Session
- Interaction1 endpointGet Interaction
- InteractionEvaluate1 endpointallegro.interactionEvaluate
- InteractionEvaluateDebug1 endpointallegro.interactionEvaluateDebug
- MagicLink2 endpointsRequest Magic Link · Validate Magic Link
- MagicLinkOtp1 endpointRequest a combined magic link and one-time code
- Otp2 endpointsRequest OTP · Validate OTP
- Recommendation2 endpointsGet Recommendations · Record Recommendation Click
- Session3 endpointsGet Session · Destroy Session · Refresh Session Token
- SessionProfile1 endpointUpdate Profile
- SessionUserAttribute4 endpointsList User Attributes · Set User Attributes · Set User Attribute · Delete User Attribute
- SocialLogin1 endpointExchange Social Login Code
- Template1 endpointGet a published template by its slug
- Webhook1 endpointVerifies a Fundraise Up delivery against the connection the request host resolves to and queues it for processing by its identifiers only. Returns 404 without a connection, 400 (with an error log line) without a signing secret, for a bad signature, or for a body without an id, type and data.object.id, and 200 otherwise; ping and test events, and events from the mode the connection is not in, are logged and not queued