Build on top of Freebin

A single POST endpoint returns live, verified offer and referral-code data as JSON. No API key needed for read access. Offer discovery requires active, verified, unexpired records with separate public-distribution approval. Links and codes require their own permission checks.

POST https://freebin.app/functions/publicApi

curl -X POST https://freebin.app/functions/publicApi \
  -H "Content-Type: application/json" \
  -d '{"action": "search_offers", "company_slug": "numan", "limit": 5}'

curl -X POST https://freebin.app/functions/publicApi \
  -H "Content-Type: application/json" \
  -d '{"action": "companies", "limit": 20}'

curl -X POST https://freebin.app/functions/publicApi \
  -H "Content-Type: application/json" \
  -d '{"action": "referral_codes", "company_slug": "uber-eats"}'

curl -X POST https://freebin.app/functions/publicApi \
  -H "Content-Type: application/json" \
  -d '{
    "action": "submit_referral",
    "url": "https://revolut.com/referral/john1234",
    "title": "Get €50 with Revolut",
    "company_name": "Revolut"
  }'

Drop two lines into any site to show Freebin-verified offers for a company. The widget is self-contained, responsive, and styled to match Freebin. Set data-company to a company slug to filter, or omit it for a general feed.

<div data-freebin-widget data-company="revolut" data-limit="4"></div>
<script src="https://mcp.freebin.app/freebin-widget.js" defer></script>

Attributes: data-company (slug), data-limit (1–10, default 4), data-api-url (override endpoint).

A one-click tool users drag to their bookmarks bar. When they're on any page with a referral link, they click it and the page is sent straight to Freebin's review queue, no copy-paste needed.

Register a webhook URL for your company and we'll POST to it when events happen: a report is filed on one of your offers, an offer expires, or a clicks milestone is hit. Each delivery is signed with an HMAC-SHA256 signature so you can verify authenticity.

{
  "event": "report_created",
  "company_slug": "revolut",
  "data": {
    "report_id": "rpt_abc123",
    "offer_id": "off_xyz789",
    "offer_title": "Get €50 signup bonus",
    "reason": "expired",
    "status": "open"
  },
  "sent_at": "2026-10-12T03:22:00.000Z"
}

import crypto from "crypto";

const rawBody = req.rawBody; // the exact request body string
const signature = req.headers["x-freebin-signature"];
const expected = crypto
  .createHmac("sha256", YOUR_WEBHOOK_SECRET)
  .update(rawBody)
  .digest("hex");

if (signature !== expected) {
  return res.status(401).send("Invalid signature");
}

To register a webhook, an admin creates a WebhookConfig record with your company slug, webhook URL, events, and a secret. The dispatch system handles the rest.