> ## Documentation Index > Fetch the complete documentation index at: https://docs.orriven.com/llms.txt > Use this file to discover all available pages before exploring further. # Place an order > The headless cart's settlement: tickets, add-ons and bundles in one order, with an optional redemption code. The order holds its places for 15 minutes until confirmed. A buyer already registered in the event is acknowledged (`alreadyRegistered: true`) — never sold a second seat, never shown an error. ## OpenAPI ````yaml /api-reference/openapi.json post /v1/events/{eventId}/orders openapi: 3.1.0 info: title: Orriven Developer API version: '2026-08-22' description: >- Workspace-scoped access to events, ticket types, registrations, redemption codes, add-ons, bundles, orders (read-only) and check-ins. Authenticate every request with `Authorization: Bearer `; the key's business unit is the entire scope, and a resource outside it answers 404, never 403. **Versioning** — the API uses date versions (this spec documents `2026-08-22`, the current one). A key is pinned to the version current at its creation and keeps that behaviour forever; send an `Orriven-Version: YYYY-MM-DD` header to serve a single request in another version (unknown dates answer 400). Every response echoes the effective version in the `Orriven-Version` response header. servers: - url: https://openapi.orriven.com description: Production - url: http://localhost:3002 description: Local development security: - bearerAuth: [] paths: /v1/events/{eventId}/orders: post: tags: - Orders summary: Place an order description: >- The headless cart's settlement: tickets, add-ons and bundles in one order, with an optional redemption code. The order holds its places for 15 minutes until confirmed. A buyer already registered in the event is acknowledged (`alreadyRegistered: true`) — never sold a second seat, never shown an error. parameters: - schema: type: string required: true name: eventId in: path requestBody: required: true content: application/json: schema: type: object properties: email: type: string maxLength: 320 format: email name: type: - string - 'null' maxLength: 200 items: type: array items: type: object properties: itemType: type: string enum: - registration_type - addon - bundle itemId: type: string minLength: 1 maxLength: 100 quantity: type: integer minimum: 1 maximum: 100 required: - itemType - itemId - quantity maxItems: 50 redemptionCode: type: - string - 'null' minLength: 1 maxLength: 64 responses: type: object additionalProperties: {} required: - email responses: '200': description: This email already holds a registration in the event. content: application/json: schema: type: object properties: alreadyRegistered: type: boolean enum: - true registration: $ref: '#/components/schemas/CheckoutRegistrationOutcome' required: - alreadyRegistered - registration '201': description: The pending order, holding its places. content: application/json: schema: type: object properties: alreadyRegistered: type: boolean enum: - false order: $ref: '#/components/schemas/Order' required: - alreadyRegistered - order '400': description: Invalid request body or parameters. content: application/json: schema: $ref: '#/components/schemas/RpcStatus' '401': description: >- Missing, unknown, revoked or expired API key — all indistinguishable on purpose. content: application/json: schema: $ref: '#/components/schemas/RpcStatus' '404': description: >- The resource does not exist in this key's business unit. A foreign id answers the same way. content: application/json: schema: $ref: '#/components/schemas/RpcStatus' '412': description: A business rule blocks the change (sold out, currency locked, …). content: application/json: schema: $ref: '#/components/schemas/RpcStatus' '429': description: Rate limit exceeded for this API key. content: application/json: schema: $ref: '#/components/schemas/RpcStatus' components: schemas: CheckoutRegistrationOutcome: type: object properties: status: type: string type: type: - string - 'null' required: - status - type Order: type: object properties: id: type: string eventId: type: string orderNumber: type: string email: type: string name: type: - string - 'null' status: type: string enum: - pending - awaiting_payment - paid - expired - cancelled - refunded totalAmount: type: integer discountAmount: type: integer refundedAmount: type: integer currency: type: string registrationId: type: - string - 'null' items: type: array items: $ref: '#/components/schemas/OrderItem' expiresAt: type: string paidAt: type: - string - 'null' fulfilledAt: type: - string - 'null' createdAt: type: string required: - id - eventId - orderNumber - email - name - status - totalAmount - discountAmount - refundedAmount - currency - registrationId - items - expiresAt - paidAt - fulfilledAt - createdAt RpcStatus: type: object properties: error: type: object properties: code: type: integer example: 404 status: type: string example: NOT_FOUND message: type: string example: Event not found. details: type: array items: {} required: - code - status - message required: - error OrderItem: type: object properties: itemType: type: string enum: - registration_type - addon - bundle itemId: type: string name: type: string quantity: type: integer unitAmount: type: integer required: - itemType - itemId - name - quantity - unitAmount securitySchemes: bearerAuth: type: http scheme: bearer description: >- The API key's secret (`osk_…`), shown once when the key is created in the console. ````