Changelog
New endpoints, fields and fixes. Breaking changes are announced here at least 6 months ahead.
2026-05-01
Added- Catalog: GET /categories, GET /products, GET /products/{slug} (catalog.read).
- Orders: GET /orders, GET /orders/{number} (orders.read) — your own orders as a customer.
- Seller: GET /seller/orders (seller.orders.read) and PATCH /seller/orders/{id}/ship (seller.orders.write).
- Webhooks: order.created, order.refunded and seller.order.updated.
2026-05-01
Added- API v1: GET /me, GET /apps, GET /status.
- API keys with scopes, live and test (sandbox) modes, per-key rate limits and usage analytics.
- OAuth 2.0 authorization code flow with PKCE, refresh-token rotation, revocation, userinfo and OpenID Connect discovery.
- Signed webhooks (HMAC-SHA256) with automatic retries and redelivery.
Planned
Planned- Separate sandbox data set for test keys.
Additive changes (new fields, endpoints, events) can ship any time; make sure your code ignores fields it doesn't know.