POST /v1/orders — Buy CS2 Listings from Your Balance

POST

orders

Buy listings from your balance

curl --request POST \
  --url https://csboard.com/v1/orders \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "item_ids": [
    "itm_8841201",
    "itm_8841340"
  ],
  "max_price_usd": 30,
  "idempotency_key": "6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f"
}
'

import requests

url = "https://csboard.com/v1/orders"

payload = {
    "item_ids": ["itm_8841201", "itm_8841340"],
    "max_price_usd": 30,
    "idempotency_key": "6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    item_ids: ['itm_8841201', 'itm_8841340'],
    max_price_usd: 30,
    idempotency_key: '6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f'
  })
};

fetch('https://csboard.com/v1/orders', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://csboard.com/v1/orders",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'item_ids' => [
        'itm_8841201',
        'itm_8841340'
    ],
    'max_price_usd' => 30,
    'idempotency_key' => '6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://csboard.com/v1/orders"

	payload := strings.NewReader("{\n  \"item_ids\": [\n    \"itm_8841201\",\n    \"itm_8841340\"\n  ],\n  \"max_price_usd\": 30,\n  \"idempotency_key\": \"6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://csboard.com/v1/orders")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"item_ids\": [\n    \"itm_8841201\",\n    \"itm_8841340\"\n  ],\n  \"max_price_usd\": 30,\n  \"idempotency_key\": \"6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://csboard.com/v1/orders")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"item_ids\": [\n    \"itm_8841201\",\n    \"itm_8841340\"\n  ],\n  \"max_price_usd\": 30,\n  \"idempotency_key\": \"6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f\"\n}"

response = http.request(request)
puts response.read_body

{
  "order_id": "ord_01J9Z3K8Q2",
  "status": "processing",
  "items": [
    {
      "item_id": "itm_8841201",
      "charged_usd": 14.37,
      "delivery": "hold"
    },
    {
      "item_id": "itm_8841340",
      "charged_usd": 12.1,
      "delivery": "instant"
    }
  ],
  "total_charged_usd": 26.47,
  "balance_after_usd": 73.53,
  "created_at": "2026-06-29T17:12:04Z"
}

The orders endpoint lets you buy between 1 and 10 listings in a single atomic request. The charge is debited from your CSBoard balance at the live asking price at the moment of execution — not at the price you saw when you queried /v1/listings. To protect yourself from price movements between lookup and purchase, always include max_price_usd as a total ceiling. The endpoint is idempotent: retrying with the same Idempotency-Key replays the original order rather than creating a duplicate charge. Authentication required. Send your key as Authorization: Bearer csb_pub_.... Trading capability required. The API key must have buying enabled. Configure this in your CSBoard profile.

Prerequisites

Before placing an order, ensure:

Trading-enabled key — buying must be turned on for your API key in your CSBoard profile settings.
Linked Steam account and trade URL — your CSBoard account must have a Steam account connected with a valid trade URL so items can be delivered.
Sufficient balance — your CSBoard balance must cover the total cost of the items at their live prices.

Request headers

string

Optional. A unique string (e.g. a UUID) that identifies this order attempt. If you retry a request with the same key, the server replays the original order response instead of executing a second purchase. Use this to safely retry on network timeouts without risk of double-charging.

Request body

string[]

required

Array of 1–10 unique listing IDs to purchase. Obtain these from the id field of GET /v1/listings responses. Each ID must appear only once per request.

number

Total price ceiling in USD, enforced atomically at execution time. If the live total of all items exceeds this value, the entire order is rejected with a price_moved error and you are not charged. Strongly recommended — without it you have no overcharge protection.

string

Alternative to the Idempotency-Key header. If both are provided, the header takes precedence. Use one or the other, not both.

Response fields

string

required

Unique identifier for this order, e.g. ord_01J9Z3K8Q2.

string

required

Current order status: processing, completed, or failed.

object[]

Per-item breakdown of the order.

Show Item object

string

The listing ID that was purchased.

number

The amount charged for this specific item at its live price.

string

Delivery mode for this item: instant (transferred immediately) or hold (subject to Steam trade hold).

number

required

Sum of all per-item charges. This is the total amount debited from your balance.

number

Your CSBoard balance immediately after the debit.

datetime

ISO 8601 timestamp of when the order was created.

Example request

curl -X POST https://csboard.com/v1/orders \
  -H "Authorization: Bearer csb_pub_..." \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: 6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f" \
  -d '{
    "item_ids": ["itm_8841201", "itm_8841340"],
    "max_price_usd": 30.00
  }'

Example response

{
  "order_id": "ord_01J9Z3K8Q2",
  "status": "processing",
  "items": [
    {
      "item_id": "itm_8841201",
      "charged_usd": 14.37,
      "delivery": "hold"
    },
    {
      "item_id": "itm_8841340",
      "charged_usd": 12.10,
      "delivery": "instant"
    }
  ],
  "total_charged_usd": 26.47,
  "balance_after_usd": 73.53,
  "created_at": "2026-06-29T17:12:04Z"
}

Error codes

HTTP status	Code	Meaning
409	`price_moved`	The live total of your items exceeded `max_price_usd`. Order rejected; no charge made. The response includes `current_total_usd` showing the actual price.
402	`insufficient_balance`	Your balance is too low to cover the order total.
400	`steam_account_required`	No linked Steam account or valid trade URL on your CSBoard account.
403	`trading_not_enabled`	The API key does not have buying enabled. Enable it in your profile.
401	`unauthorized`	Missing or invalid API key.
429	`rate_limit_exceeded`	Over 30 requests/min. Wait for the `Retry-After` header value before retrying.

Always include max_price_usd in your request. Prices on a live marketplace can change between the moment you query /v1/listings and the moment your order executes. Without this ceiling, your balance could be debited at a higher price than you intended, and there is no automatic rollback.

Items delivered via hold are subject to a Steam trade hold. Check the tradable_at field on the original listing (from GET /v1/listings) to see exactly when a held item will become tradable in your Steam inventory.

Authorizations

Authorization

string

header

required

Send your key as a Bearer token on every request: Authorization: Bearer csb_pub_.... Generate keys in your CSBoard profile.

Headers

Idempotency-Key

string

Optional. A retried request with the same key replays the original order instead of buying twice.

Body

application/json

item_ids

string[]

required

1–10 unique ids from /v1/listings. Some items can't be combined in a single order — if so the order is rejected and you can split it.

Required array length: 1 - 10 elements

max_price_usd

number

Total ceiling in USD. Strongly recommended — your overcharge protection, enforced atomically inside the locked debit.

idempotency_key

string

Optional; or send the Idempotency-Key header. Replays the original order on retry.

autoclaim

boolean

Sticky per-account setting (not per-order). Send true once to switch your key into auto-claim mode: every held order is then auto-released the moment its hold clears (your bot must auto-accept the Steam trade offer within ~15 minutes). Send false to switch back to manual claiming via POST /orders/{id}/claim. Omit to leave the setting unchanged.

Response

Order accepted and debited.

order_id

string

required

status

enum<string>

required

Available options:

processing,

completed,

failed

total_charged_usd

number

required

items

object[]

Show child attributes

balance_after_usd

number

created_at

string<date-time>

Buy listings from your balance

curl --request POST \
  --url https://csboard.com/v1/orders \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "item_ids": [
    "itm_8841201",
    "itm_8841340"
  ],
  "max_price_usd": 30,
  "idempotency_key": "6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f"
}
'

import requests

url = "https://csboard.com/v1/orders"

payload = {
    "item_ids": ["itm_8841201", "itm_8841340"],
    "max_price_usd": 30,
    "idempotency_key": "6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    item_ids: ['itm_8841201', 'itm_8841340'],
    max_price_usd: 30,
    idempotency_key: '6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f'
  })
};

fetch('https://csboard.com/v1/orders', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://csboard.com/v1/orders",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'item_ids' => [
        'itm_8841201',
        'itm_8841340'
    ],
    'max_price_usd' => 30,
    'idempotency_key' => '6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://csboard.com/v1/orders"

	payload := strings.NewReader("{\n  \"item_ids\": [\n    \"itm_8841201\",\n    \"itm_8841340\"\n  ],\n  \"max_price_usd\": 30,\n  \"idempotency_key\": \"6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://csboard.com/v1/orders")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"item_ids\": [\n    \"itm_8841201\",\n    \"itm_8841340\"\n  ],\n  \"max_price_usd\": 30,\n  \"idempotency_key\": \"6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://csboard.com/v1/orders")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"item_ids\": [\n    \"itm_8841201\",\n    \"itm_8841340\"\n  ],\n  \"max_price_usd\": 30,\n  \"idempotency_key\": \"6f9c2b10-1a2b-4c3d-8e4f-5a6b7c8d9e0f\"\n}"

response = http.request(request)
puts response.read_body

{
  "order_id": "ord_01J9Z3K8Q2",
  "status": "processing",
  "items": [
    {
      "item_id": "itm_8841201",
      "charged_usd": 14.37,
      "delivery": "hold"
    },
    {
      "item_id": "itm_8841340",
      "charged_usd": 12.1,
      "delivery": "instant"
    }
  ],
  "total_charged_usd": 26.47,
  "balance_after_usd": 73.53,
  "created_at": "2026-06-29T17:12:04Z"
}

Market Data

Trading

Account

Webhooks

Status

POST /v1/orders — Buy CS2 Listings from Your Balance

Prerequisites

Request headers

Request body

Response fields

Example request

Example response

Error codes

Authorizations

Headers

Body

Response

​Prerequisites

​Request headers

​Request body

​Response fields

​Example request

​Example response

​Error codes

Authorizations

Headers

Body

Response

Prerequisites

Request headers

Request body

Response fields

Example request

Example response

Error codes