Publish Product - Waffo Pancake

Publish a subscription product from test to production environment. This is a one-way, first-publish-only operation.

POST /v1/actions/subscription-product/publish-product

Authentication: API Key

Do not include the X-Environment header for this endpoint. Publishing is always one-way from test to production.

Request Body

Field	Type	Required	Description
`id`	string	Yes	Product ID (`PROD_xxx` format)

Example Request

await client.subscriptionProducts.publish({
  id: "PROD_3F7H2J5L8N1Q4S6U",
});

// Uses callApi() helper from authentication.mdx
const result = await callApi("POST", "/v1/actions/subscription-product/publish-product", {
  id: "PROD_3F7H2J5L8N1Q4S6U",
});
console.log(result.data);

// Uses callApi() helper from authentication.mdx
String body = """
    {"id":"PROD_3F7H2J5L8N1Q4S6U"}""";

String response = callApi("POST", "/v1/actions/subscription-product/publish-product", body);
System.out.println(response);

# Uses call_api() helper from authentication.mdx
result = call_api("POST", "/v1/actions/subscription-product/publish-product", {
    "id": "PROD_3F7H2J5L8N1Q4S6U",
})
print(result["data"])

// Uses callAPI() helper from authentication.mdx
body := map[string]interface{}{
    "id": "PROD_3F7H2J5L8N1Q4S6U",
}
result, err := callAPI("POST", "/v1/actions/subscription-product/publish-product", body)
if err != nil {
    log.Fatal(err)
}
fmt.Println(string(result))

// Uses call_api() helper from authentication.mdx
let body = serde_json::json!({
    "id": "PROD_3F7H2J5L8N1Q4S6U"
});
let result = call_api("POST", "/v1/actions/subscription-product/publish-product", &body).await?;
println!("{}", result);

/* Uses call_api() helper from authentication.mdx */
const char *body = "{\"id\":\"PROD_3F7H2J5L8N1Q4S6U\"}";
char *response = call_api("POST", "/v1/actions/subscription-product/publish-product", body);
printf("%s\n", response);
free(response);

// Uses callApi() helper from authentication.mdx
std::string body = R"({"id":"PROD_3F7H2J5L8N1Q4S6U"})";
std::string response = callApi("POST", "/v1/actions/subscription-product/publish-product", body);
std::cout << response << std::endl;

MERCHANT_ID="MER_2aUyqjCzEIiEcYMKj7TZtw"
TIMESTAMP=$(date +%s)
BODY='{"id":"PROD_3F7H2J5L8N1Q4S6U"}'
BODY_HASH=$(echo -n "$BODY" | openssl dgst -sha256 -binary | base64 | tr -d '\n')
CANONICAL_REQUEST="POST
/v1/actions/subscription-product/publish-product
$TIMESTAMP
$BODY_HASH"

SIGNATURE=$(echo -n "$CANONICAL_REQUEST" | openssl dgst -sha256 -sign private_key.pem | base64 | tr -d '\n')

curl -X POST "https://api.waffo.ai/v1/actions/subscription-product/publish-product" \
  -H "Content-Type: application/json" \
  -H "X-Merchant-Id: $MERCHANT_ID" \
  -H "X-Timestamp: $TIMESTAMP" \
  -H "X-Signature: $SIGNATURE" \
  -d "$BODY"

MERCHANT_ID="MER_2aUyqjCzEIiEcYMKj7TZtw"
TIMESTAMP=$(date +%s)
BODY='{"id":"PROD_3F7H2J5L8N1Q4S6U"}'
BODY_HASH=$(echo -n "$BODY" | openssl dgst -sha256 -binary | base64 | tr -d '\n')
CANONICAL_REQUEST="POST
/v1/actions/subscription-product/publish-product
$TIMESTAMP
$BODY_HASH"

SIGNATURE=$(echo -n "$CANONICAL_REQUEST" | openssl dgst -sha256 -sign private_key.pem | base64 | tr -d '\n')

wget -qO- "https://api.waffo.ai/v1/actions/subscription-product/publish-product" \
  --header="Content-Type: application/json" \
  --header="X-Merchant-Id: $MERCHANT_ID" \
  --header="X-Timestamp: $TIMESTAMP" \
  --header="X-Signature: $SIGNATURE" \
  --post-data="$BODY"

Success Response (200)

{
  "data": {
    "product": {
      "id": "PROD_3F7H2J5L8N1Q4S6U",
      "storeId": "STO_2D5F8G3H1K4M6N9P",
      "name": "Pro Plan",
      "description": "Full access to all Pro features.",
      "billingPeriod": "monthly",
      "prices": {
        "USD": { "amount": "29.00", "taxCategory": "saas" },
        "EUR": { "amount": "27.00", "taxCategory": "saas" }
      },
      "media": [],
      "successUrl": "https://example.com/welcome",
      "metadata": { "trialDays": 14 },
      "status": "active",
      "createdAt": "2026-03-30T10:30:00.000Z",
      "updatedAt": "2026-03-30T12:00:00.000Z"
    }
  }
}

Response Fields

Same as Create Subscription Product response.

Only the first publish is supported. Once a product has a production version, this endpoint returns an error. To update a published product, use the Update Product endpoint in the production environment.

Errors

Retry policy: Never retry 4xx — fix the request and resubmit. Retry 5xx with exponential backoff (start 5s, max 3 attempts).

Status	`errors[0].message`	What it means	Recommended handling
400	`Missing header: x-context-merchant-id`	The merchant context header was not forwarded	Fix your SDK configuration
400	`Missing required field: id`	Request body did not include `id`	Add `id`, resubmit
400	`Expected format: PROD_xxx, got "X"`	`id` is not a valid Short ID	Use a `PROD_` prefixed Short ID
400	`No test version found`	The product has no version in the test environment to publish	Create and activate a test version first via Update Product / Update Status
400	`Test version is not active`	Test version exists but its status is `inactive`	Activate the test version via Update Status, then publish
400	`Already published to production`	Product already has a production version (publish is first-publish-only)	Use Update Product in the production environment instead
401	`Unauthorized`	Authentication failed	Verify API key, timestamp, and signature
404	`Product not found` / `Source version not found`	Product ID does not exist (or its source version is missing)	Verify the product ID
500	`Internal server error`	Transient downstream failure	Retry with exponential backoff (start 5s, max 3 attempts)

⌘I