Products

Store API

Integrate RentedMall into your own tools with store-scoped API keys and signed webhook deliveries.

The problem

Sellers and developers need programmatic access without bypassing tenant isolation.

The solution

Use Bearer API keys on /api/v1/open for store resources, and configure outbound webhooks with HMAC signatures and retries.

Capabilities

What you get

Store API

Read store, products, categories, inventory, customers, orders, payments, fulfillment.

API keys

Scoped, hashed at rest, revocable, rate-limited.

Webhooks

Signed payloads with timestamped HMAC headers.

Events

Includes order.paid, payment.succeeded, fulfillment.completed, and related events.

Errors

problem+json responses with request IDs.

Tenant safety

Keys never broaden beyond their store scope.

How it works

Typical flow

  1. 01

    Create a key

    Generate a store API key under Integrations.

  2. 02

    Call /api/v1/open

    Pass resource query params with required scopes.

  3. 03

    Subscribe webhooks

    Register endpoints and verify signatures.

  4. 04

    Automate

    Drive ops from your own systems.

Use cases

Who this helps

Custom storefronts

Build on the catalog and order APIs.

Ops automation

React to paid orders and fulfillment events.

Related

Keep exploring

FAQ

Common questions

Where are docs?

See Documentation → API for endpoints and conventions.

How are webhooks signed?

X-RentedMall-Webhook-Signature with t= and v1= HMAC components.

Ready to try this?

Start a store in the dashboard, or talk to us about your setup.