Stores API
Manage connected stores programmatically. List stores, view connection status, and manage store settings.
Core Store Routes
GET
/api/v1/storesPOST
/api/v1/storesDELETE
/api/v1/stores/:idPOST
/api/v1/stores/:id/reconnectAll queries are merchant-scoped. Create accepts name, HTTPS url, and platform (woocommerce, shopify, or wix). Create, disconnect, and reconnect require owner or admin role.
Platform Authentication
| Platform | Auth / ingestion | Availability note |
|---|---|---|
| WooCommerce | Store-bound plugin key/HMAC; plugin pushes orders and heartbeats | Available |
| Shopify | OAuth 2.0; signed platform webhooks | Feature-gated; direct dashboard card is Coming soon; replace the deployment-wide provisioning bearer with verified per-shop context before broad production onboarding |
| Wix | OAuth 2.0; webhook-driven preview | Feature-gated; production blocked until Wix signed-token verification passes real event fixtures |
OAuth Routes
Shopify and Wix install/callback/webhook routes are integration internals whose availability depends on FEATURE_SHOPIFY or FEATURE_WIX. Use an authorised installation flow rather than calling callback or webhook routes manually.
WooCommerce Health
The public connect route supports the legacy public/secret key handshake. The HMAC-authenticated heartbeat updates plugin/WooCommerce/PHP versions and scheduled/admin heartbeat timestamps.