Public API v1 contract
The eleven current operations, authentication, pagination, errors, fixed-window rate limits, and limitations.
platform2026-09-09
Developer Platform documentation
Bilingual public contracts that distinguish CURRENT, PARTIAL, PLANNED, and DEFERRED capabilities.
18 documents
API v1
Authentication
OAuth architecture and token lifecycle
Verified Authorization Code, PKCE S256, exchange, refresh rotation, storage, and revocation behavior.
security2026-09-09
Building Apps
Building apps on the current platform
App identity, version manifests, supported capabilities, and conservative extension planning.
marketplace2026-09-09
Changelog
Developer changelog
Baseline and categories for public API, OAuth, scope, webhook, and Marketplace contract changes.
platform2026-09-09
Platform Concepts
Platform concepts and identities
A glossary of tenant, merchant, human roles, apps, installations, tokens, webhooks, and review concepts.
platform2026-08-23
Getting Started
Getting started with a SaaS App
Create an app safely while accounting for the current OAuth, testing, API, and webhook limitations.
marketplace2026-09-09
Marketplace
App Development Rules
Security, privacy, reliability, portability, and uninstall requirements for Marketplace apps.
marketplace2026-08-23
Prohibited Behavior
Behaviors that violate the public extension boundary, merchant trust, or platform safety.
security2026-08-23
Submission and review lifecycle
The exact current per-version review flow, responsibilities, and known review limitations.
marketplace2026-09-09
Marketplace state reference
Exact current developer, app, version, installation, and webhook-delivery state values.
marketplace2026-09-09
Overview
What is the SaaS Developer Platform?
The public, version-aware contract for building external apps that connect to merchant stores.
marketplace2026-09-09
Public extension boundary
The only supported boundary between SaaS Core and an external developer app.
platform2026-08-23
Current availability and roadmap labels
A conservative map of CURRENT, PARTIAL, PLANNED, and DEFERRED extension capabilities.
marketplace2026-09-09
Scopes
Canonical scope reference
The ten registered scopes, their risk, real public coverage, and requestability and reviewed capability contracts.
security2026-09-09
Testing
Testing developer apps
The current local fixture model, required negative cases, and planned hosted sandbox.
quality2026-09-09
Versioning
API and app versioning
Current API v1 and exact app-version behavior, with honest deprecation and migration-guide status.
platform2026-08-23
Webhooks
Webhook subscriptions and delivery
Current subscription, signing, retry, SSRF, secret-return, and emitted-event truth.
security2026-09-09
Documentation is read-only and never grants permissions.