TENDERWon a tender that requires PunchOut?Download the Tender Kit

Custom and headless

PunchOut REST API for custom and headless stores

Your store is custom-built? Implement a few JSON endpoints and it gets the same features as our plugins: PunchOut sessions and cart return and, with the Premium plan, purchase orders, order confirmations and ship notices. The gateway speaks cXML and OCI with your buyer.

  • €2,950/year per site
  • Up to 10 buyers
  • cXML and OCI handled for you

How it fits

  1. Buyer opens your catalogue

    Their system calls the gateway via cXML or OCI.

  2. Gateway calls your API

    You start a session for that customer.

  3. Cart comes back

    Your store sends the cart to the gateway.

  4. Order arrives

    With the Premium plan, the approved purchase order reaches your create order endpoint.

In short

The PunchOut Rocket REST API lets a custom or headless e-commerce join SAP Ariba, Coupa and SAP OCI PunchOut without a plugin. Your store exposes a session start and sends the cart back; with the Premium plan it also receives purchase orders as JSON and, with the OC & ASN add-on, reports confirmations and shipments. The gateway translates everything to cXML or OCI for the buyer.

What you build

Three touchpoints, not a protocol

Start a session

When the buyer opens your catalogue, the gateway asks your store to log in the right customer and returns a session URL.

Return the cart

When the buyer clicks “return”, your store posts the cart (items, prices, units, classification) to the gateway.

Receive the order

With the Premium plan, purchase orders arrive at your create order endpoint as JSON. With the OC & ASN add-on, your order status endpoint lets the gateway send confirmations and ship notices.

Read the integration specification: endpoints, fields, SSO, cart transfer, purchase orders and order status. Need a test buyer? Ask our developers.

Security

Tokens and keys

  • API keys stored encrypted; only the last 4 characters are shown
  • Key rotation from the dashboard
  • Short-lived session tokens
  • All traffic over TLS

Security and privacy →

Contact

Talk to a developer

Tell us about your stack and your buyer’s system.

Your go-live is within 30 days: leave a phone number and your request will be handled with priority.

We use your data to answer your request, as described in our privacy policy.

Go-Live Assist · €1,500 one-off

Short on time? We set it up for you.

We onboard your first buyer: we read the buyer’s supplier documentation, configure the connection, run the tests and support you through the buyer’s UAT until the first real order. We start within 48 hours of your order.

About Go-Live Assist

FAQ

REST API questions

Which e-commerce platforms can use the REST API?

Any custom or headless store that can call an HTTPS API and serve product pages over HTTPS.

Do I need to implement cXML or OCI myself?

No. Your store talks to our REST API; the gateway speaks cXML or OCI with the buyer’s system.

How are API keys protected?

Keys are stored encrypted and only their last 4 characters are ever shown. You can rotate them from the dashboard.

How much does it cost?

€2,950 per site per year, with up to 10 buyers included, like the plugins.

30-day free trial · no credit card

Your buyer is waiting. Let’s launch.

Install the plugin today and run your first test session this afternoon. If your deadline is close, tell us and we will handle your request with priority.