openapi: 3.0.3 info: title: 3PL Warehouse Manager (SecureWMS) REST Authentication Stock Summaries API description: 'REST API for 3PL Warehouse Manager, the cloud warehouse management system (WMS) for third-party logistics providers, sold under Extensiv and historically known as "3PL Central". The public integration surface is the SecureWMS REST API served from https://secure-wms.com. It is used to create and retrieve orders, manage SKU items and inventory, read stock summaries and stock details, submit and track inbound receivers (Advance Ship Notices), and enumerate customers, warehouses/facilities, and locations. Authentication is OAuth 2.0 client-credentials. Base64-encode "clientId:clientSecret" and POST it as a Basic Authorization header to /AuthServer/api/Token with a JSON body of {"grant_type":"client_credentials","user_login_id":} (a user_login or user_login_id provided by the warehouse for auditing). The returned bearer access token is short-lived - typically valid 30 to 60 minutes - and should be refreshed at least every 30 minutes. All traffic must use HTTPS; plain HTTP is not supported. Collection endpoints are paged with pgnum (page number) and pgsiz (page size) query parameters and can be filtered with Resource Query Language (RQL, http://api.3plcentral.com/rels/rql) via the rql parameter and ordered with sort. Responses are HAL-style JSON where list payloads carry records under a ResourceList (or Summaries for stock summaries) property. Endpoint provenance: read (GET) endpoints for customers, items, inventory, stock details, stock summaries, facility locations, and orders are CONFIRMED against the public developer portal and the open-source singer-io tap-3plcentral extractor. Order creation, receiver (ASN) create/list/get, and the facilities and order-packages resources are documented in the 3PL Warehouse Manager developer portal; request/response shapes that are gated behind the authenticated developer portal are MODELED here honestly and marked per-operation with x-endpoint-status.' version: '1.0' contact: name: Extensiv - 3PL Warehouse Manager Developer Community url: https://developer.3plcentral.com/ license: name: Proprietary url: https://www.extensiv.com/legal servers: - url: https://secure-wms.com description: 3PL Warehouse Manager (SecureWMS) production security: - bearerAuth: [] tags: - name: Stock Summaries description: Rolled-up on-hand / available / allocated quantities. paths: /inventory/stocksummaries: get: operationId: getStockSummaries tags: - Stock Summaries summary: Retrieve stock summaries description: Rolled-up on-hand / available / allocated / committed quantities keyed by facility and item. List payload is carried under a Summaries property. CONFIRMED (GET /inventory/stocksummaries). x-endpoint-status: confirmed parameters: - $ref: '#/components/parameters/pgnum' - $ref: '#/components/parameters/pgsiz' - $ref: '#/components/parameters/rql' responses: '200': description: A page of stock summaries. content: application/json: schema: $ref: '#/components/schemas/SummariesResponse' '401': $ref: '#/components/responses/Unauthorized' components: schemas: SummariesResponse: type: object description: Stock summaries list payload. Records are carried under Summaries. properties: TotalResults: type: integer Summaries: type: array items: $ref: '#/components/schemas/StockSummary' _links: type: object additionalProperties: true StockSummary: type: object properties: FacilityId: type: integer ItemId: type: integer Sku: type: string OnHand: type: number Available: type: number Allocated: type: number Committed: type: number parameters: pgnum: name: pgnum in: query description: Page number (1-based). required: false schema: type: integer minimum: 1 default: 1 pgsiz: name: pgsiz in: query description: Page size (records per page). required: false schema: type: integer minimum: 1 default: 100 rql: name: rql in: query description: Resource Query Language filter, e.g. "readonly.lastModifiedDate=ge=2024-01-01". Reference http://api.3plcentral.com/rels/rql. required: false schema: type: string responses: Unauthorized: description: Missing, invalid, or expired access token. securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: JWT description: Short-lived access token from POST /AuthServer/api/Token. basicAuth: type: http scheme: basic description: Base64-encoded "clientId:clientSecret" used only to obtain a token.