Base URL
/storefront. Responses are JSON with camelCase property names, and all date/time values are UTC.
Authentication
Every request requires a Storefront API key in theX-Api-Key header:
sfk_. Create one in the dashboard under Settings → API Keys — or contact us if you don’t have an account yet and want to evaluate the API.
Customer-scoped endpoints (appointments, orders, profile) additionally require a customer JWT as a Bearer token — see the Authentication guide for the full token flow.
Every endpoint page in this reference includes an interactive playground: paste your
sfk_ key into the authorization field, fill in the parameters, and send real requests against your store directly from the docs.Conventions
- Pagination — list endpoints accept
page(1-indexed) andtake(max 100) and return ametaobject withitemCount,pageCount,hasPreviousPage, andhasNextPage. - Carts — cart and checkout endpoints identify the active cart with the
X-Cart-Idheader. - Errors — conventional HTTP status codes with a JSON body;
400responses include a per-fielderrorsarray. See error responses. - Rate limits — 100 requests / 60 seconds for general endpoints, stricter limits on auth flows. See rate limits.