With an API key, your own systems can list and read Store orders, add shipments, refund orders, add notes and tags, change variant prices, SKUs and stock, and read stock levels, returns and customers. Each route needs the same Store permission as the website. Send an Idempotency-Key header with a refund or shipment so a repeated request is not applied twice.
Team admins can add Store webhooks for store.order.paid, store.order.fulfilled, store.order.refunded, store.order.canceled, store.product.updated, store.stock.low and store.return.requested. Each delivery is signed like booking webhooks and is retried for about two days when your endpoint does not answer with a 2xx status. The delivery log shows each attempt, and a failed delivery can be sent again.