Everything you need before your first Loyalty API call.
Welcome to the Yotpo Loyalty API
The Yotpo Loyalty API lets you integrate loyalty programs, reward points, and referrals into your store or application — award points for customer actions, manage loyalty profiles, track referrals, and redeem points for rewards.
Base URL
https://loyalty.yotpo.com/api/v2Authentication
Every request is authenticated with two headers — your GUID and your API key, both found in the Settings section of your Loyalty admin:
curl "https://loyalty.yotpo.com/api/v2/vip_tiers" \
-H "X-GUID: YOUR_GUID" \
-H "X-API-KEY: YOUR_API_KEY"See Authentication for where to find your credentials.
Rate limits
Rate limits are set per account. Every response tells you your limit and what's left in the RateLimit-Limit, RateLimit-Remaining and RateLimit-Reset headers; exceeding it returns 429. Space out bulk syncs and retry throttled calls after RateLimit-Reset seconds. See Guidelines and conventions.
Responses
The API accepts and returns JSON. Validation errors return 422 with an errors object (or an error string) that names the problem; a wrong or missing GUID/API key returns 401. Each endpoint page lists its error responses; Errors covers them all, with retry guidance. Before you go live, read Testing your integration: there's no sandbox.
What you can do
Not sure where to start? What you can build maps common integrations to the recipes and endpoints you need.
- Customers — create and update loyalty profiles, fetch details, manage tags, birthdays, and anniversaries
- Orders & refunds — record orders to award points against your active campaigns
- Actions & points — record custom customer actions and adjust point balances
- Redemptions — create redemptions, manage redemption options and coupon codes
- Referrals — identify referrers and send referral emails
- VIP tiers & campaigns — fetch tiers and active campaigns
- Webhooks — subscribe to loyalty events like points earned, redemptions, and tier changes
Other Yotpo APIs
Backend store sync (products, orders, customers) lives in the Core API; reviews and visual content in the UGC API. Building a public app? See the App Developer API.
Next steps
- Set up authentication
- Review the guidelines and conventions
- Track changes on the Changelog