ShopVista API Documentation
Welcome to the ShopVista REST API. This guide covers everything you need to integrate with our e-commerce platform. Our API uses standard HTTP methods, returns JSON responses, and requires authentication via Bearer tokens.
All API requests must include the `Authorization` header. Sandbox credentials are available in your developer dashboard.
Authentication
ShopVista uses API keys and OAuth 2.0 Bearer tokens for authentication. Include your token in the `Authorization` header of every request.
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json"
Token Scopes
| Scope | Description |
|---|---|
products:read | View product listings and details |
products:write | Create, update, or delete products |
orders:read | Retrieve order information |
orders:write | Place or modify orders |
Products
Manage your product catalog. Supports filtering, pagination, and bulk operations.
Retrieve a paginated list of products matching your query parameters.
| Parameter | Type | Description |
|---|---|---|
| category OPTIONAL | string | Filter by category slug |
| min_price OPTIONAL | number | Minimum price in USD |
| page OPTIONAL | integer | Page number (default: 1) |
| limit OPTIONAL | integer | Items per page (max: 100) |
Create a new product in the catalog.
Orders
Handle order creation, status tracking, and fulfillment updates.
Create a new customer order. Supports multiple items, shipping addresses, and payment intents.
Webhooks
Subscribe to real-time events such as `order.created`, `payment.failed`, `inventory.low`, and `product.updated`. Configure endpoints in your dashboard or via the API.
Always verify webhook signatures using your `webhook_secret`. Unverified requests may be malicious.
Error Handling
ShopVista uses standard HTTP status codes. Errors return a JSON payload with details.
| Code | Meaning | Common Cause |
|---|---|---|
400 | Bad Request | Invalid JSON or missing required fields |
401 | Unauthorized | Missing or expired API key |
403 | Forbidden | Insufficient token scopes |
404 | Not Found | Resource ID doesn't exist |
429 | Too Many Requests | Exceeded rate limits |
500 | Server Error | Internal platform issue |
Rate Limits
API requests are limited to 1,000 requests per minute per API key. Headers indicate your current usage:
X-RateLimit-Limit: Maximum requests allowedX-RateLimit-Remaining: Requests left in current windowX-RateLimit-Reset: Unix timestamp when the window resets
When limit is exceeded, the API returns 429 Too Many Requests with a Retry-After header.