Platform capabilities

Everything behind one secure gateway.

A complete commerce platform for merchants and retail — exposed through a single authenticated, versioned API. Here's what approved partners build on.

Channel Gateway

One canonical API in front of every retail channel.

  • Per-channel adapters map each storefront format to a single internal contract
  • Add or change a channel without touching your core integration
  • In-store, online and POS unified behind one endpoint

Security & Access

Authentication and authorization enforced at the edge.

  • Authenticate with App-Token, OAuth 2.0 or signed JWT
  • Per-partner keys — scoped, rotatable, with live & test modes
  • Role-based permissions, full auditing and encrypted transport

Code & Barcode

Industry-standard identifiers, generated correctly.

  • GTIN, GS1-128 and serial-number generation
  • Built-in check digits and validation
  • Database-level uniqueness and gap-filling

Inventory & POS

Real-time stock and point-of-sale operations.

  • Stock levels, code activation and reservation flows
  • Predictable, resource-oriented POS endpoints
  • Consistent behaviour across stores and regions

Payments

Process and reconcile with confidence.

  • Transaction processing through the integrated gateway
  • Reconciliation with complete audit trails
  • Designed for high-throughput retail volumes

Formats & Versioning

Meet every system, stay stable over time.

  • XML or JSON from the same endpoint via content negotiation
  • Backward-compatible, versioned APIs (v1 & v2)
  • Per-channel rate limiting and predictable errors

Authentication & credentials

Choose the model that fits your stack — every request is authenticated and scoped.

App-Token

Simple, per-partner API keys for server-to-server calls.

X-App-Token: sk_live_••••••••••

OAuth 2.0

Client-credentials grant issuing short-lived access tokens.

Authorization: Bearer at_••••••••••

JWT

Signed, verifiable bearer tokens for stateless sessions.

Authorization: Bearer eyJhbGciOiJI…

API keys

Two key types, two environments. Secret keys stay server-side; publishable keys are safe for clients.

Live & Test
● Secret · Live

sk_live_••••••••••••••••

Server-side. Full access — never expose.

● Secret · Test

sk_test_••••••••••••••••

Server-side. Sandbox data, no real charges.

● Publishable · Live

pk_live_••••••••••••••••

Client-side. Safe to ship in apps.

● Publishable · Test

pk_test_••••••••••••••••

Client-side. Sandbox environment.

Ready to integrate?

Pricing, full documentation and credentials are available to approved partners.