Build on Hesett.

Bearer-token auth on every endpoint. Pass your API key in the Authorization header. Test keys start with sk_test_, live keys with sk_live_. Rotate keys monthly.

curl https://api.hesett.com/v1/dashboard/overview \
  -H "Authorization: Bearer sk_test_xxx"

Read aggregate venue metrics: today and week revenue, top dishes, covers, average ticket, tip rate, scan-to-order conversion.

Manage categories, dishes, promos, modifiers. Auto-translation to 9 languages on save. Photos optimised on upload.

The same feed your kitchen reads. Subscribe to the webhook for real-time push, or poll if you must.

Bookings, walk-ins, table assignments. Trigger SMS reminders, confirm with a tap.

Stripe-backed. Refunds, statements, payouts. PCI-DSS Level 1 — your servers never see the card.

Static or dynamic QR codes per table. Scan analytics included.

Stock tracking with reorder alerts and COGS calculation.

Subscribe to events instead of polling. We retry with exponential backoff and sign every payload with HMAC-SHA256.

// Express endpoint
app.post('/hesett/webhook', (req, res) => {
  const sig = req.headers['hesett-signature'];
  if (!verify(sig, req.rawBody, WEBHOOK_SECRET)) return res.status(401).end();
  const event = req.body;
  if (event.type === 'order.created') {
    enqueueKitchen(event.data);
  }
  res.status(200).end();
});

Official SDKs for JavaScript / TypeScript and Python. Generated from the same OpenAPI spec the dashboard consumes.

import { Hesett } from '@hesett/sdk';

const hesett = new Hesett({ apiKey: process.env.HESETT_KEY });

const overview = await hesett.dashboard.overview();
console.log(overview.todayRevenue);

Every error returns a JSON body with code, message, and request_id. HTTP status codes follow conventions: 4xx for client errors, 5xx for ours.

try {
  await hesett.orders.create({ /* ... */ });
} catch (err) {
  if (err.code === 'rate_limited') backoff();
  else if (err.code === 'invalid_request') logToSentry(err);
  else throw err;
}