Purchase orders, straight into your own system

Let your ERP or accounting system collect purchase orders and send back an accept or reject response — without anyone having to sign in to a portal and retype an order.

Two calls, that's the integration

POST /api/supplier/po-integration/orders
X-Api-Key: pit_…

POST /api/supplier/po-integration/status
X-Api-Key: pit_…

For suppliers

Sign in to find your API key, the endpoints to call, worked examples of both requests, and a record of every call your system has made.

For PurchaseIT staff

Issue, recover and rotate vendor keys, manage supplier and staff logins, and review the full integration activity log across every vendor.

Scoped to you

A key identifies exactly one vendor server-side, so a supplier can only ever see and respond to their own purchase orders. Every call is audited.

How it works

POST
/api/supplier/po-integration/orders
Collect the purchase orders waiting for you. Returns 200 with the orders, or 204 when there is nothing new. Poll no more than once a minute.
POST
/api/supplier/po-integration/status
Send your response to one order — Accepted, AcceptedwithComment or Rejected — quoting the transaction reference from the order you collected.

Getting set up

PurchaseIT issues your company an API key and a login for this portal.
Sign in, change your password, and copy your key from your integration page. You are shown the full key once, when it is issued.
Send it as the X-Api-Key header on both endpoints. Nothing else identifies you — there is no vendor ID to pass.
Lost your key? PurchaseIT can recover it for you, so nothing in your system has to change.

Responding to an order

POST /api/supplier/po-integration/status
X-Api-Key: pit_…
Content-Type: application/json

{
  "transactionReference": "8f14e45f-ceea-467a-9575-4b4b4b8e2a11",
  "poNumber": "PO-104233",
  "orderStatus": "Accepted",
  "comments": "Dispatching 12 August."
}

Full request and response examples, including every status code, are on your integration page once you sign in.

Already been given a login?