19 Aug 2026
Shop API keys: what /api/v1 can do
Owners issue Bearer keys in Settings → API for products, groups, sales, invoices, and customers. Rate-limited, no wipe endpoints.
Create a key on the shop
Only the shop owner can mint a token. Copy it once. Send Authorization: Bearer hshop_… on every /api/v1 call. Keys never belong in front-end JavaScript or public repos.
What you can read and write
Products, menu groups, sales, invoices, and customers. The API is the foundation for later native apps — it is not a second admin that can delete the whole shop.
Limits and language
Calls are rate-limited. The till still runs English or Hindi independently of the API; marketing pages stay English for now.