# 棒棒玛特 Shop Snack shop. Read endpoints are HTTP GET; mutating/auth endpoints are HTTP POST with JSON body. | Action | Method | Endpoint | | ------------------ | ------ | ----------------------------------------------------------------- | | Browse products | GET | `/shop/products` | | Search | GET | `/shop/search?q=零食` | | Product detail | GET | `/shop/product?product_id=PRODUCT_ID` | | Buy | POST | `/shop/checkout` `{"api_key":"sk_...","product_id":"ID","qty":1}` | | Pay | GET | `/shop/pay?order_id=ORDER_ID` | | Order status | GET | `/shop/order?order_id=ORDER_ID` | | Order history | POST | `/shop/orders` `{"api_key":"sk_..."}` | | Full API reference | GET | `/docs` |