API Reference

This catalog contains 20 public-only operations explicitly released by API CI: 14 Storefront public reads, 2 installation identity/readiness reads, and 4 API Key catalog reads. Every route not listed here remains private.

• API source commit: 5912605d35f2384bd6bbd4b868b87afeedac6a96
• OpenAPI SHA-256: c7bd778d077f80f71ece290839a6b984aeef824c2a774510e882a617afecd644
• OpenAPI: 3.1.0

Storefront public reads

• GET /api/v1/runtime-config — Get the public runtime configuration
• GET /api/v1/bootstrap — Get the public site bootstrap configuration
• GET /api/v1/public/contact — Get public contact channels
• GET /api/v1/legal/documents — List current published legal documents by locale
• GET /api/v1/storefront-decorations/merchants/{slug} — Get the published Storefront decoration
• GET /api/v1/public/store-access/{store}/config — Get the public store security configuration
• GET /api/v1/search — Search public products
• GET /api/v1/catalog/categories — List public categories
• GET /api/v1/catalog/products — List the public product catalog
• GET /api/v1/catalog/products/{slug} — Get a public product by slug
• GET /api/v1/catalog/merchants/{slug} — Get a public store profile
• GET /api/v1/catalog/merchants/{slug}/products — List public products for a store
• GET /api/v1/catalog/merchants/{slug}/categories — List public categories for a store
• GET /api/v1/catalog/merchants/{merchantSlug}/products/{productSlug} — Get a public product for a store

Installation identity and readiness

• GET /api/v1/open/installation/identity — Get the installation credential identity
• GET /api/v1/open/installation/readiness — Get the installation credential readiness

API Key catalog reads

• GET /api/v1/open/identity — Get the current API Key identity and scopes
• GET /api/v1/open/catalog/categories — List public categories with an API Key
• GET /api/v1/open/catalog/products — List public products with an API Key
• GET /api/v1/open/catalog/products/{slug} — Get a public product with an API Key

Capabilities not published

OAuth, Turnstile, installation writes, and Webhook management are absent from this artifact, so this site generates no endpoints for them.

Authoritative blockers

These statuses come from the same public-only artifact. They explain why a capability is not available; they do not imply that an endpoint exists.