Add order - MyMorabaa API

Add order

curl --request POST \
  --url https://sam.aragon.morabaa.com/api/orders \
  --header 'Content-Type: application/json' \
  --header 'X-App-Id: <x-app-id>' \
  --header 'X-App-Secret: <x-app-secret>' \
  --data '
{
  "mobile": "07700000000",
  "fullname": "Ahmed Ali",
  "businessId": "9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af",
  "externalId": "web-order-1001",
  "note": "Deliver after 5 PM",
  "items": [
    {
      "id": "7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1",
      "name": "Paracetamol 500mg",
      "morabaaLocalId": 1024,
      "price": 12.5,
      "quantity": 2,
      "currencyId": 1
    }
  ]
}
'

import requests

url = "https://sam.aragon.morabaa.com/api/orders"

payload = {
    "mobile": "07700000000",
    "fullname": "Ahmed Ali",
    "businessId": "9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af",
    "externalId": "web-order-1001",
    "note": "Deliver after 5 PM",
    "items": [
        {
            "id": "7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1",
            "name": "Paracetamol 500mg",
            "morabaaLocalId": 1024,
            "price": 12.5,
            "quantity": 2,
            "currencyId": 1
        }
    ]
}
headers = {
    "X-App-Id": "<x-app-id>",
    "X-App-Secret": "<x-app-secret>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-App-Id': '<x-app-id>',
    'X-App-Secret': '<x-app-secret>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    mobile: '07700000000',
    fullname: 'Ahmed Ali',
    businessId: '9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af',
    externalId: 'web-order-1001',
    note: 'Deliver after 5 PM',
    items: [
      {
        id: '7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1',
        name: 'Paracetamol 500mg',
        morabaaLocalId: 1024,
        price: 12.5,
        quantity: 2,
        currencyId: 1
      }
    ]
  })
};

fetch('https://sam.aragon.morabaa.com/api/orders', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sam.aragon.morabaa.com/api/orders",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'mobile' => '07700000000',
    'fullname' => 'Ahmed Ali',
    'businessId' => '9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af',
    'externalId' => 'web-order-1001',
    'note' => 'Deliver after 5 PM',
    'items' => [
        [
                'id' => '7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1',
                'name' => 'Paracetamol 500mg',
                'morabaaLocalId' => 1024,
                'price' => 12.5,
                'quantity' => 2,
                'currencyId' => 1
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-App-Id: <x-app-id>",
    "X-App-Secret: <x-app-secret>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sam.aragon.morabaa.com/api/orders"

	payload := strings.NewReader("{\n  \"mobile\": \"07700000000\",\n  \"fullname\": \"Ahmed Ali\",\n  \"businessId\": \"9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af\",\n  \"externalId\": \"web-order-1001\",\n  \"note\": \"Deliver after 5 PM\",\n  \"items\": [\n    {\n      \"id\": \"7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1\",\n      \"name\": \"Paracetamol 500mg\",\n      \"morabaaLocalId\": 1024,\n      \"price\": 12.5,\n      \"quantity\": 2,\n      \"currencyId\": 1\n    }\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-App-Id", "<x-app-id>")
	req.Header.Add("X-App-Secret", "<x-app-secret>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sam.aragon.morabaa.com/api/orders")
  .header("X-App-Id", "<x-app-id>")
  .header("X-App-Secret", "<x-app-secret>")
  .header("Content-Type", "application/json")
  .body("{\n  \"mobile\": \"07700000000\",\n  \"fullname\": \"Ahmed Ali\",\n  \"businessId\": \"9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af\",\n  \"externalId\": \"web-order-1001\",\n  \"note\": \"Deliver after 5 PM\",\n  \"items\": [\n    {\n      \"id\": \"7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1\",\n      \"name\": \"Paracetamol 500mg\",\n      \"morabaaLocalId\": 1024,\n      \"price\": 12.5,\n      \"quantity\": 2,\n      \"currencyId\": 1\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sam.aragon.morabaa.com/api/orders")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-App-Id"] = '<x-app-id>'
request["X-App-Secret"] = '<x-app-secret>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"mobile\": \"07700000000\",\n  \"fullname\": \"Ahmed Ali\",\n  \"businessId\": \"9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af\",\n  \"externalId\": \"web-order-1001\",\n  \"note\": \"Deliver after 5 PM\",\n  \"items\": [\n    {\n      \"id\": \"7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1\",\n      \"name\": \"Paracetamol 500mg\",\n      \"morabaaLocalId\": 1024,\n      \"price\": 12.5,\n      \"quantity\": 2,\n      \"currencyId\": 1\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "id": "2d28f0cb-663f-4e58-b984-b99b8b9637dd"
}

POST

orders

Add order

curl --request POST \
  --url https://sam.aragon.morabaa.com/api/orders \
  --header 'Content-Type: application/json' \
  --header 'X-App-Id: <x-app-id>' \
  --header 'X-App-Secret: <x-app-secret>' \
  --data '
{
  "mobile": "07700000000",
  "fullname": "Ahmed Ali",
  "businessId": "9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af",
  "externalId": "web-order-1001",
  "note": "Deliver after 5 PM",
  "items": [
    {
      "id": "7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1",
      "name": "Paracetamol 500mg",
      "morabaaLocalId": 1024,
      "price": 12.5,
      "quantity": 2,
      "currencyId": 1
    }
  ]
}
'

import requests

url = "https://sam.aragon.morabaa.com/api/orders"

payload = {
    "mobile": "07700000000",
    "fullname": "Ahmed Ali",
    "businessId": "9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af",
    "externalId": "web-order-1001",
    "note": "Deliver after 5 PM",
    "items": [
        {
            "id": "7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1",
            "name": "Paracetamol 500mg",
            "morabaaLocalId": 1024,
            "price": 12.5,
            "quantity": 2,
            "currencyId": 1
        }
    ]
}
headers = {
    "X-App-Id": "<x-app-id>",
    "X-App-Secret": "<x-app-secret>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-App-Id': '<x-app-id>',
    'X-App-Secret': '<x-app-secret>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    mobile: '07700000000',
    fullname: 'Ahmed Ali',
    businessId: '9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af',
    externalId: 'web-order-1001',
    note: 'Deliver after 5 PM',
    items: [
      {
        id: '7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1',
        name: 'Paracetamol 500mg',
        morabaaLocalId: 1024,
        price: 12.5,
        quantity: 2,
        currencyId: 1
      }
    ]
  })
};

fetch('https://sam.aragon.morabaa.com/api/orders', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sam.aragon.morabaa.com/api/orders",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'mobile' => '07700000000',
    'fullname' => 'Ahmed Ali',
    'businessId' => '9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af',
    'externalId' => 'web-order-1001',
    'note' => 'Deliver after 5 PM',
    'items' => [
        [
                'id' => '7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1',
                'name' => 'Paracetamol 500mg',
                'morabaaLocalId' => 1024,
                'price' => 12.5,
                'quantity' => 2,
                'currencyId' => 1
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-App-Id: <x-app-id>",
    "X-App-Secret: <x-app-secret>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sam.aragon.morabaa.com/api/orders"

	payload := strings.NewReader("{\n  \"mobile\": \"07700000000\",\n  \"fullname\": \"Ahmed Ali\",\n  \"businessId\": \"9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af\",\n  \"externalId\": \"web-order-1001\",\n  \"note\": \"Deliver after 5 PM\",\n  \"items\": [\n    {\n      \"id\": \"7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1\",\n      \"name\": \"Paracetamol 500mg\",\n      \"morabaaLocalId\": 1024,\n      \"price\": 12.5,\n      \"quantity\": 2,\n      \"currencyId\": 1\n    }\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-App-Id", "<x-app-id>")
	req.Header.Add("X-App-Secret", "<x-app-secret>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sam.aragon.morabaa.com/api/orders")
  .header("X-App-Id", "<x-app-id>")
  .header("X-App-Secret", "<x-app-secret>")
  .header("Content-Type", "application/json")
  .body("{\n  \"mobile\": \"07700000000\",\n  \"fullname\": \"Ahmed Ali\",\n  \"businessId\": \"9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af\",\n  \"externalId\": \"web-order-1001\",\n  \"note\": \"Deliver after 5 PM\",\n  \"items\": [\n    {\n      \"id\": \"7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1\",\n      \"name\": \"Paracetamol 500mg\",\n      \"morabaaLocalId\": 1024,\n      \"price\": 12.5,\n      \"quantity\": 2,\n      \"currencyId\": 1\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sam.aragon.morabaa.com/api/orders")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-App-Id"] = '<x-app-id>'
request["X-App-Secret"] = '<x-app-secret>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"mobile\": \"07700000000\",\n  \"fullname\": \"Ahmed Ali\",\n  \"businessId\": \"9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af\",\n  \"externalId\": \"web-order-1001\",\n  \"note\": \"Deliver after 5 PM\",\n  \"items\": [\n    {\n      \"id\": \"7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1\",\n      \"name\": \"Paracetamol 500mg\",\n      \"morabaaLocalId\": 1024,\n      \"price\": 12.5,\n      \"quantity\": 2,\n      \"currencyId\": 1\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "id": "2d28f0cb-663f-4e58-b984-b99b8b9637dd"
}

Endpoint

POST /orders Production URL: https://sam.aragon.morabaa.com/api/orders

Authentication

This endpoint requires app authentication headers:

X-App-Id: <APP_ID>
X-App-Secret: <APP_SECRET>

Required headers

string

required

App ID credential.

string

required

App secret credential.

Need credentials? Contact info@morabaa.com.

If either header is invalid or missing, the response is 401 Unauthorized.

Request example

curl -X POST "https://sam.aragon.morabaa.com/api/orders" \
  -H "X-App-Id: <APP_ID>" \
  -H "X-App-Secret: <APP_SECRET>" \
  -H "Content-Type: application/json" \
  -d '{
    "mobile": "07700000000",
    "fullname": "Ahmed Ali",
    "businessId": "9c7f3b9d-0809-4f5e-b8f2-b6e46a4eb3af",
    "externalId": "web-order-1001",
    "note": "Deliver after 5 PM",
    "items": [
      {
        "id": "7f8f6d3b-2b93-4af3-9f65-7ea7d5ab79f1",
        "name": "Paracetamol 500mg",
        "morabaaLocalId": 1024,
        "price": 12.5,
        "quantity": 2,
        "currencyId": 1
      }
    ]
  }'

Body parameters

string

required

Customer mobile number. Must match the Iraqi mobile format 07[4-9]xxxxxxxx.

string

required

Customer full name. Maximum length is 64 characters.

guid

required

Business ID that will receive the order. It must belong to the authenticated app.

array

required

Order items. At least one item is required.

string

Optional external order identifier from your system. The endpoint accepts this field, but the current implementation does not forward it to the upstream order service.

string

Optional order note.

Item fields

guid

required

Item ID.

string

required

Item name.

int

required

Item local ID in MyMorabaa. Must be greater than 0.

decimal

required

Item price at the time of ordering.

decimal

required

Ordered quantity. Must be greater than 0.

int

Currency ID for the item price. Defaults to 1 and must be greater than 0.

Notes:

businessId must belong to the authenticated app.
A successful response returns 201 Created.
If the upstream order service rejects the order or is unavailable, the response is 502 Bad Gateway.

Response

The response contains the created order ID:

guid

Created order ID.

{
  "id": "2d28f0cb-663f-4e58-b984-b99b8b9637dd"
}

Headers

X-App-Id

string

required

App ID credential.

X-App-Secret

string

required

App secret credential.

Body

application/json

mobile

string

required

Customer mobile number.

Pattern: ^07[4-9]\d{8}

fullname

string

required

Customer full name.

Maximum string length: 64

businessId

string<uuid>

required

Business ID that will receive the order.

items

object[]

required

Order items.

Minimum array length: 1

Show child attributes

externalId

string

Optional external order identifier from your system. The endpoint accepts this field, but the current implementation does not forward it to the upstream order service.

note

string

Optional order note.

Response

Order created successfully.

string<uuid>

required

Created order ID.

​Endpoint

​Authentication

​Required headers

​Request example

​Body parameters

​Item fields

​Response

Headers

Body

Response

Endpoint

Authentication

Required headers

Request example

Body parameters

Item fields

Response