SnackMagic

SnackMagic is a 100% customizable snack-box gifting service, now part of Stadium, that lets recipients build their own box from 500+ snacks and beverages or receive curated gifts, delivered worldwide. Companies use it for employee, client, prospect, and event gifting. SnackMagic is exposed to developers through the Stadium API (api.bystadium.com), a JSON REST API for embedding a global gift, rewards, and branded-swag catalog, placing orders funded by a pre-purchased Wallet balance, sending Stadium Shop points via treat links, and triggering webhook-automation gift orders. This profile was enriched from the provider's public OpenAPI and developer surface.

SnackMagic publishes 5 APIs on the APIs.io network, including Authentication API, Automation management API, Order management API, and 2 more. Tagged areas include Company, Consumer, Gifting, Rewards, and Swag.

SnackMagic’s developer surface includes documentation, API reference, getting-started guide, authentication, pricing, signup flow, engineering blog, and 13 more developer resources.

50.6/100 developing ▬ flat Agent 46/100 agent ready Full breakdown ↓
scored 2026-07-27 · rubric v0.5
AccessSelf serve
5 APIs
CompanyConsumerGiftingRewardsSwagSnacksE-CommerceFulfillment

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 50.6/100 · developing
Contract Quality 15.6 / 25
Developer Ergonomics 11.7 / 20
Commercial Clarity 10.5 / 20
Operational Transparency 2.7 / 13
Governance 0.0 / 12
Discoverability 10.0 / 10
Agent readiness — 46/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 15 / 15
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 5 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/snackmagic: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 5

Individual APIs this provider publishes, each with its own machine-readable definition.

SnackMagic Authentication API

Stadium uses JWT (as Bearer token) for authentication. API provides 4 different methods to generate the token: 1. Client Credentials 2. Authorization Code (OAuth2) 3. Authorizat...

SnackMagic Automation management API

Automation related API endpoints

SnackMagic Order management API

Order related API endpoints

SnackMagic Store management API

Store related API endpoints

SnackMagic User management API

User related API endpoints

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Snackmagic Authentication

http/apiKey/oauth2 · 2 schemes

SECURITY

Snackmagic Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Snackmagic Trust Center

trust center published

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Snackmagic Agentic Access

15 operations · 8 acting

15 operations · 8 acting

AGENTIC

Resources

Get Started 3

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 3

MCP servers, agent skills, and machine-readable catalogs

Build 1

SDKs, sample code, and the tooling you integrate with

Access & Security 3

Authentication, authorization, and security posture

Operate 2

Status, limits, changes, and where to get help

Commercial 3

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: snackmagic
name: SnackMagic
description: SnackMagic is a 100% customizable snack-box gifting service, now part of Stadium, that lets recipients build
  their own box from 500+ snacks and beverages or receive curated gifts, delivered worldwide. Companies use it for employee,
  client, prospect, and event gifting. SnackMagic is exposed to developers through the Stadium API (api.bystadium.com), a
  JSON REST API for embedding a global gift, rewards, and branded-swag catalog, placing orders funded by a pre-purchased Wallet
  balance, sending Stadium Shop points via treat links, and triggering webhook-automation gift orders. This profile was enriched
  from the provider's public OpenAPI and developer surface.
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://fecdn.snackmagic.com/static/media/snackmagic-logo.b9e03ebf.svg
url: https://raw.githubusercontent.com/api-evangelist/snackmagic/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- craft-ventures
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-21'
tags:
- Company
- Consumer
- Gifting
- Rewards
- Swag
- Snacks
- E-Commerce
- Fulfillment
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
apis:
- aid: snackmagic:snackmagic-authentication-api
  name: SnackMagic Authentication API
  description: 'Stadium uses JWT (as Bearer token) for authentication. API provides 4 different methods to generate the token:


    1. Client Credentials

    2. Authorization Code (OAuth2)

    3. Authorization Code using PKCE

    4. Token using refresh token


    The authentication method to be used depends on your use case - whether you want to place orders using a global

    organizer account or user''s own Stadium Account and your implementation details.


    For each method, once you generate a _token_, it needs to be set as the _Bearer_ token in the **Authorization** header.

    The _token_ is valid for **24 hours**. The _token_ validity can be checked with our **Validate token** API endpoint.

    Once expired, a new _token_ will need to be generated using the same API endpoint as used earlier.


    ### Client Credentials


    This should be used if you are an organizer and want to place an order or send points using a **global** organizer account.

    You can directly use the **Get Token** API endpoint to fetch the _token_ that can then be used in other APIs for authorization.


    ### Authorization Code (OAuth2)


    This should be used if you want to place an order or send points on **behalf** of a Stadium user. This uses Oauth2 flow
    where you will need

    need to make an **Authorize** request first. This will redirect the user to the Stadium login page and once they sign
    in, a *code* is

    received on the given `redirect_url`. Using this _code_, the _token_ can be fetched using the **Get Token by Code** API
    providing both

    `client_id` and `client_secret`. The `redirect_url` should be the same as given in the authorize call.


    ### Authorization Code using PKCE


    If you want to use the Authorization code method but cannot store the `client_secret` securely (like native application
    or SPA) you should use

    this flow. In this you need to [generate a PKCE](https://developer.pingidentity.com/en/tools/pkce-code-generator.html)
    `code_challenge` and `code_verifier`

    using the SHA256 method. The `code_challenge` needs to sent as an additional param to the **Authorize** request. Once
    the _code_ is received send the

    `code_verifier` as the param (instead of `client_secret`) to the **Get Token by Code** API.


    ### Token using refresh token


    You can use this to issue a new access token using an existing access token and a refresh token.'
  humanURL: https://api.bystadium.com/api/v2/docs
  baseURL: https://api.bystadium.com/api/v2
  tags:
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/snackmagic-authentication-api-openapi.yml
  - type: ErrorCatalog
    url: errors/snackmagic-problem-types.yml
  - type: Conventions
    url: conventions/snackmagic-conventions.yml
  - type: DataModel
    url: data-model/snackmagic-data-model.yml
  - type: Conformance
    url: conformance/snackmagic-conformance.yml
  - type: Lifecycle
    url: lifecycle/snackmagic-lifecycle.yml
  - type: Sandbox
    url: sandbox/snackmagic-sandbox.yml
- aid: snackmagic:snackmagic-automation-management-api
  name: SnackMagic Automation management API
  description: Automation related API endpoints
  humanURL: https://api.bystadium.com/api/v2/docs
  baseURL: https://api.bystadium.com/api/v2
  tags:
  - Automation management
  properties:
  - type: OpenAPI
    url: openapi/snackmagic-automation-management-api-openapi.yml
  - type: ErrorCatalog
    url: errors/snackmagic-problem-types.yml
  - type: Conventions
    url: conventions/snackmagic-conventions.yml
  - type: DataModel
    url: data-model/snackmagic-data-model.yml
  - type: Conformance
    url: conformance/snackmagic-conformance.yml
  - type: Lifecycle
    url: lifecycle/snackmagic-lifecycle.yml
  - type: Sandbox
    url: sandbox/snackmagic-sandbox.yml
- aid: snackmagic:snackmagic-order-management-api
  name: SnackMagic Order management API
  description: Order related API endpoints
  humanURL: https://api.bystadium.com/api/v2/docs
  baseURL: https://api.bystadium.com/api/v2
  tags:
  - Order management
  properties:
  - type: OpenAPI
    url: openapi/snackmagic-order-management-api-openapi.yml
  - type: ErrorCatalog
    url: errors/snackmagic-problem-types.yml
  - type: Conventions
    url: conventions/snackmagic-conventions.yml
  - type: DataModel
    url: data-model/snackmagic-data-model.yml
  - type: Conformance
    url: conformance/snackmagic-conformance.yml
  - type: Lifecycle
    url: lifecycle/snackmagic-lifecycle.yml
  - type: Sandbox
    url: sandbox/snackmagic-sandbox.yml
- aid: snackmagic:snackmagic-store-management-api
  name: SnackMagic Store management API
  description: Store related API endpoints
  humanURL: https://api.bystadium.com/api/v2/docs
  baseURL: https://api.bystadium.com/api/v2
  tags:
  - Store management
  properties:
  - type: OpenAPI
    url: openapi/snackmagic-store-management-api-openapi.yml
  - type: ErrorCatalog
    url: errors/snackmagic-problem-types.yml
  - type: Conventions
    url: conventions/snackmagic-conventions.yml
  - type: DataModel
    url: data-model/snackmagic-data-model.yml
  - type: Conformance
    url: conformance/snackmagic-conformance.yml
  - type: Lifecycle
    url: lifecycle/snackmagic-lifecycle.yml
  - type: Sandbox
    url: sandbox/snackmagic-sandbox.yml
- aid: snackmagic:snackmagic-user-management-api
  name: SnackMagic User management API
  description: User related API endpoints
  humanURL: https://api.bystadium.com/api/v2/docs
  baseURL: https://api.bystadium.com/api/v2
  tags:
  - User management
  properties:
  - type: OpenAPI
    url: openapi/snackmagic-user-management-api-openapi.yml
  - type: ErrorCatalog
    url: errors/snackmagic-problem-types.yml
  - type: Conventions
    url: conventions/snackmagic-conventions.yml
  - type: DataModel
    url: data-model/snackmagic-data-model.yml
  - type: Conformance
    url: conformance/snackmagic-conformance.yml
  - type: Lifecycle
    url: lifecycle/snackmagic-lifecycle.yml
  - type: Sandbox
    url: sandbox/snackmagic-sandbox.yml
common:
- type: Website
  url: https://snackmagic.com
- type: DeveloperPortal
  url: https://www.bystadium.com/api-integrations
- type: Documentation
  url: https://api.bystadium.com/api/v2/docs
- type: APIReference
  url: https://api.bystadium.com/api/v2/docs
- type: GettingStarted
  url: https://www.bystadium.com/api-integrations
- type: Authentication
  url: authentication/snackmagic-authentication.yml
- type: AgenticAccess
  url: agentic-access/snackmagic-agentic-access.yml
- type: LLMsTxt
  url: llms/snackmagic-llms.txt
- type: DomainSecurity
  url: security/snackmagic-domain-security.yml
- type: TrustCenter
  url: https://trust.bystadium.com
- type: StatusPage
  url: https://status.bystadium.com
- type: AgentSkill
  url: skills/_index.yml
- type: Pricing
  url: https://www.bystadium.com/go/pricing
- type: SignUp
  url: https://www.bystadium.com/
- type: TermsOfService
  url: https://www.bystadium.com/terms-of-use
- type: PrivacyPolicy
  url: https://www.bystadium.com/privacy-policy
- type: Blog
  url: https://www.bystadium.com/blog
- type: Support
  url: https://help.bystadium.com/hc
- type: GitHubOrganization
  url: https://github.com/snackmagic
- type: Wallet
  url: https://www.bystadium.com/wallet
x-enrichment:
  date: '2026-07-21'
  status: enriched
  artifacts_added: 17
  pass: local-v1