Changelog

New endpoints, fields and fixes. Breaking changes are announced here at least 6 months ahead.

2026-05-01

Added
  • Catalog: GET /categories, GET /products, GET /products/{slug} (catalog.read).
  • Orders: GET /orders, GET /orders/{number} (orders.read) — your own orders as a customer.
  • Seller: GET /seller/orders (seller.orders.read) and PATCH /seller/orders/{id}/ship (seller.orders.write).
  • Webhooks: order.created, order.refunded and seller.order.updated.

2026-05-01

Added
  • API v1: GET /me, GET /apps, GET /status.
  • API keys with scopes, live and test (sandbox) modes, per-key rate limits and usage analytics.
  • OAuth 2.0 authorization code flow with PKCE, refresh-token rotation, revocation, userinfo and OpenID Connect discovery.
  • Signed webhooks (HMAC-SHA256) with automatic retries and redelivery.

Planned

Planned
  • Separate sandbox data set for test keys.

Additive changes (new fields, endpoints, events) can ship any time; make sure your code ignores fields it doesn't know.