General (general)

Wildberries API provides sellers with the opportunity to manage their store and receive operational and statistical information via the HTTP Rest API protocol.

API description is provided in the Swagger (Open API) format. It can be used for the import to the other tools (such as PostMan) or the client code generation on different programming languages with the help of Swagger CodeGen.

For manual API check you can use:

• For Windows - PostMan
• For Linux - curl

Technical support is provided through web chats in seller portal. When creating new support request, please select category from API group.

All news and changes regarding API are being published in Wildberries news and Telegram channel.

The WB API has request rate limits. To evenly distribute the load, the token bucket algorithm is used. Limits for specific API methods are specified in the documentation.

For example:

This means that you can send 300 requests per minute. These requests should be evenly distributed over time, meaning the interval between requests should be 60 seconds/300 requests = 0.2 seconds.

The API allows for request bursts, where you can perform several requests simultaneously. The allowable burst is returned in the response header X-Ratelimit-Remaining. It appears in all response statuses except for error 429.

X-Ratelimit-Remaining is the number of requests you can currently make without adding delays. After each request, the X-Ratelimit-Remaining value decreases by one. If X-Ratelimit-Remaining is 0 and you make the next request without delay, you will receive a 429 error in response. The X-Ratelimit-Remaining value replenishes over time.

If you exceed the request rate limit, you will receive a 429 error. In this case, you need to wait a short period before making the next request. To determine how long you need to wait, use the headers from the 429 response:

• X-Ratelimit-Retry — the number of seconds after which you can retry the request. If you attempt it earlier, you will continue to receive a 429 error.
• X-Ratelimit-Limit — the maximum allowable burst of requests, which will be replenished after X-Ratelimit-Reset seconds.
• X-Ratelimit-Reset — the number of seconds after which the allowable burst of requests will be restored to the maximum value specified in X-Ratelimit-Limit.

Response example:

HTTP/1.1 429 Too Many Requests
...
X-Ratelimit-Reset: 29
X-Ratelimit-Retry: 2
...
X-Ratelimit-Limit: 10

You need API token to authenticate requests. It is valid for 180 days after creation. Add the token to the Authorization request header.

1. Go to your seller account, click the profile name and select Settings → Access to API.
2. If necessary, select the option:
   • Test scope (Sandbox): the token can only be used in a test scope (sandbox).
   • Read only: You can't change any data using this token, it's only for reading. The token can be used with real data and in the test scope (sandbox).
3. Choose the API categories for this token.

4. Click Create a token.
5. Copy and save the token in some safe place. Later you can't view it in your seller account. If you lost your token, create a new one.

The token is a JWT according to RFC 7519. To check if your token is valid and which categories of API methods are available with it, you can decode it.

Public token fields

Fields that are not in the table are service fields and can be deleted.

s field

The s field is a bitmask, an integer, each bit of which means the presence or absence of some option.

Learn more about bitmask

Bit values

Token decoding will allow to check if the token is valid and which categories of API methods are available. You can decode the token on the separate page.