Skip to main content
Several behaviours in Loyalife are configurable per program — including points-to-currency conversion rate, token lifetime, OTP expiry duration, OTP attempt limits, redemption thresholds, and rate limits. The values documented here reflect defaults or common configurations. For the exact values that apply to your integration, contact your Xoxoday implementation contact or reach out to support@xoxoday.com.

Base URL

All API endpoints share the same base domain:
This is the production base URL. A staging environment is also available — contact your Xoxoday implementation contact for the staging URL specific to your program.

Authentication

Every endpoint (except GenerateAuthToken itself) requires a bearer token in the Authorization header:
See Authentication for details on obtaining and refreshing tokens.

Modules

Common Response Shape

All responses use a standard envelope. See Response Format.

Common Parameters