GrowFlow API
GrowFlow is a seed-to-sale cannabis platform powering cultivation, wholesale, retail POS, and compliance for licensed operators across Metrc, BioTrack, and CCRS states. An unofficial API lets you programmatically pull inventory, packages, harvests, transfers/manifests, orders, sales, and customer records—and push updates like new orders, package adjustments, and transfer intake back into GrowFlow, without a public developer program.
What is GrowFlow?
GrowFlow is a seed-to-sale cannabis software platform that helps licensed operators manage cultivation, wholesale, retail, and compliance across their entire business. Cannabis cultivators, processors, distributors, and dispensaries use GrowFlow to run grow and inventory management, process wholesale and retail orders, ring sales through a dispensary POS, generate labels and manifests, and automate state compliance reporting to Metrc, BioTrack, and CCRS.
Core product areas include:
- Wholesale (grow management, inventory control, order management, and compliance for cultivators, processors, and distributors)
- Retail (dispensary POS, inventory management, sales and ordering, label editor, and transfer intake tools)
- Marketplace (digital storefront linking wholesaler inventory to retailer ordering)
- eCommerce (customer-facing digital menus integrated with physical retail)
- Compliance (automated state reporting and integrations with Metrc, BioTrack, and CCRS)
Common data entities:
- Inventory items, Products, Packages, Lots, and Batches
- Harvests, Plants, and Cultivation rooms
- Transfers, Manifests, and Transfer intake records
- Wholesale orders, Retail orders, and Marketplace listings
- POS sales, Transactions, Customers, and Loyalty records
- Labels, Compliance reports, and State reporting submissions (Metrc, BioTrack, CCRS)
The GrowFlow Integration Challenge
Operators run mission-critical cultivation, wholesale, and retail workloads on GrowFlow daily, but turning its portal-driven workflows into API-driven automation is non-trivial:
- No public developer program: GrowFlow exposes integrations to state systems and select partners, but does not publish an open, self-serve API or developer portal—so your own inventory and sales data stays trapped behind the web app
- Compliance-coupled data model: Packages, transfers, and manifests are tightly bound to Metrc, BioTrack, and CCRS tag schemes that vary by state, so generic integrations break across jurisdictions
- Split wholesale and retail surfaces: Grow/wholesale and dispensary POS each carry their own object models, IDs, and lifecycle states that must be reconciled for a single view of inventory
- Authenticated sessions only: Access is gated by user login and session cookies, which complicates headless, scheduled automation against your own account
- Real-time inventory pressure: POS sales, package adjustments, and transfer intake change stock continuously, so syncs must capture state at the moment of the transaction to stay accurate
- Manifest and label workflows: Transfer manifests and printed labels require careful generation, intake, and reconciliation that are hard to replicate through screen-driven steps
How Supergood Creates GrowFlow APIs
Supergood reverse-engineers GrowFlow's authenticated browser flows across the wholesale and retail surfaces to deliver a resilient API layer for your own GrowFlow account—without waiting on a partner program.
- Handles username/password login and MFA securely in a managed session
- Maintains session continuity with automated refresh and change detection
- Normalizes responses across inventory, packages, harvests, transfers, orders, and POS sales so you integrate once and rely on consistent objects
- Aligns with state compliance schemes (Metrc, BioTrack, CCRS) so package and manifest data maps cleanly across jurisdictions
Use GrowFlow with AI agents: GrowFlow MCP Server →
Getting Started
- Schedule Integration Assessment
Book a 30-minute session to confirm your modules, states, and authentication model.
- Supergood Generates and Validates Your API
We deliver a production-ready GrowFlow adapter tailored to your account, locations, and compliance jurisdictions.
- Deploy with Monitoring
Go live with continuous monitoring and automatic adjustments as GrowFlow evolves.
API Endpoints
Authentication
/authenticateAuthenticate to a GrowFlow account using username/password, or MFA, and obtain a session token for downstream calls.
Inventory
/inventoryList inventory items, packages, and lots across wholesale and retail locations with filters for product, status, and quantity.
Cultivation
/harvestsRetrieve harvests, plant batches, and cultivation room records with stage and date-range filters.
Transfers
/create_transferCreate an outbound transfer with manifest details and packages for shipment between licensed locations.
Orders
/ordersPull wholesale and retail orders with status, customer, and fulfillment filters.
Retail
/salesRetrieve POS sales transactions, line items, customers, and loyalty activity from dispensary locations.
Use Cases
Sync inventory and packages across wholesale and retail
- Pull packages, lots, and inventory levels from grow, wholesale, and dispensary locations into a single warehouse - Reconcile package quantities against POS sales and transfer intake in near real time - Surface low-stock and expiring inventory to purchasing and replenishment workflows
Automate transfers, manifests, and intake
- Generate outbound transfers and manifests from upstream order or ERP systems - Reconcile inbound transfer intake against expected packages and Metrc/BioTrack/CCRS tags - Flag manifest discrepancies and quantity mismatches to compliance teams
Stream POS sales and customer data downstream
- Push POS sales, transactions, and line items into BI, accounting, and revenue tools - Sync customer and loyalty records into CRM and marketing platforms - Trigger restock and reorder events when retail inventory crosses thresholds
Centralize compliance reporting across states
- Pull package, transfer, and sales data mapped to Metrc, BioTrack, and CCRS schemes per state - Reconcile state reporting submissions against internal inventory of record - Build cross-jurisdiction compliance dashboards from one normalized API surface
Technical Specifications
Authentication
Username/password and MFA handled in a managed, encrypted session
Connectivity
Authenticated browser flows against GrowFlow's wholesale and retail surfaces; no public developer API required
Response format
Normalized JSON across inventory, packages, harvests, transfers, orders, and POS sales objects
Rate limits
Adaptive throttling tuned to your account to avoid GrowFlow-side limits
Session management
Automatic session refresh, MFA replay handling, and credential rotation
Data freshness
Near real-time pulls for inventory, sales, and transfers with optional scheduled batch syncs
Security
Encrypted credential vault, scoped access tokens, SOC 2-aligned controls, and audit logging
Webhooks
Event-style callbacks for new sales, package adjustments, transfer intake, and order status changes
Latency
Sub-second reads on cached entities; multi-second writes when posting transfers and orders
Throughput
Horizontally scaled workers sized to multi-location wholesale and retail volume
Reliability
Retry, backoff, and idempotency keys for package adjustments, transfers, and order writes
Adaptation
Continuous monitoring of GrowFlow releases and state compliance scheme changes across Metrc, BioTrack, and CCRS
Frequently asked questions
Yes. Supergood normalizes data across GrowFlow's grow, wholesale, and dispensary retail surfaces, so inventory, packages, orders, and POS sales are exposed through one consistent API regardless of which module they originate in.
No. GrowFlow does not publish a public, self-serve developer API. Supergood works against your existing authenticated GrowFlow account, so you do not need partner approval to access your own data.
Packages, transfers, and manifests are mapped to the state reporting scheme for each jurisdiction. Supergood preserves the underlying Metrc, BioTrack, or CCRS tags rather than forcing a single generic schema, so multi-state operators get consistent objects across states.
Both. Beyond reads, the API supports writes such as creating transfers and manifests, adjusting packages, and updating orders, all performed through your authenticated session with retries and idempotency for safety.
Reads are near real time, with optional scheduled batch syncs. Because POS sales and transfer intake change stock continuously, syncs capture state at the moment of the transaction to keep inventory accurate.