Submissions

Protected write flow

POST requests must include a complete validated product record. The endpoint records a submission and associates it with an owner; paid plans then hand off to the existing Stripe checkout. Submission, review, payment, and account state remain protected. Do not send credentials or payment data through this endpoint.

POST /api/submissions
Content-Type: application/json

{ "name": "...", "url": "https://...", "category": "...",
  "pricing": "FREE", "shortDesc": "...",
  "email": "you@example.com" }