Keepface Affiliate API v2
The public server-side affiliate tracking API for Keepface. Brands POST sale and refund events from their own backend (or from Shopify, or from the browser JS pixel) and Keepface attributes them to the creator whose link or discount code drove the sale. Every write is HMAC-SHA256 signed with a per-brand secret over a timestamped payload, replay-protected at a 300 second tolerance, and idempotent on (brand_id, order_id). A public click-resolve endpoint turns a short affiliate token into a destination URL, cookie window and campaign status. Rate limits and Retry-After are published per endpoint, and the API returns X-RateLimit-Limit / X-RateLimit-Remaining on live responses.