Scopes
Scopes limit what your app can read or write on a merchant store after OAuth install.
Available scopes
read_orders · write_orders · read_products · write_products · read_customers · write_inventory. Request only what you need — merchants see scopes on the consent screen.
Merchant consent
Install links open /dashboard/apps/oauth/authorize with your client_id. Merchants approve or deny scoped access per store.
Plan entitlements
Merchants need apiAccess and webhooks plan features for API keys and webhook delivery. (apiAccess, webhooks).
REST endpoints (partner subset)
GET /sdk/orders (read_orders) — List orders (paginated) GET /sdk/orders/:id (read_orders) — Get order by id PATCH /sdk/orders/:id/status (write_orders) — Update order status POST /sdk/orders (write_orders) — Create order GET /sdk/products (read_products) — List products POST /sdk/products (write_products) — Create product PATCH /sdk/products/:id/status (write_products) — Update product status GET /sdk/customers (read_customers) — List customers POST /sdk/inventory/adjust (write_inventory) — Adjust variant stock