Build on Ecomone
Connect your app, agency tooling or AI agent to Ecomone shops. Read orders and products, update fulfillment, react to events in real time and let agents build shops through MCP.
curl "https://api.ecomone.shop/api/public/v1/orders?limit=5" \
-H "X-Api-Key: ek_..." \
-H "X-Api-Secret: sk_..."const res = await fetch("https://api.ecomone.shop/api/public/v1/orders?limit=5", {
headers: {
"X-Api-Key": process.env.ECOMONE_API_KEY,
"X-Api-Secret": process.env.ECOMONE_API_SECRET,
},
});
const { data, pagination } = await res.json();import os, requests
res = requests.get(
"https://api.ecomone.shop/api/public/v1/orders",
params={"limit": 5},
headers={
"X-Api-Key": os.environ["ECOMONE_API_KEY"],
"X-Api-Secret": os.environ["ECOMONE_API_SECRET"],
},
)
orders = res.json()["data"]Ways to integrate
REST API
JSON over HTTPS for orders, products, customers, collections, discounts, reviews, inventory and revenue.
OAuth apps
Let any merchant connect your app with one click. OAuth 2.1 with PKCE, dynamic client registration, refresh tokens.
Webhooks
Get notified when orders are paid, shipped, fulfilled, refunded or cancelled, digital goods are delivered or someone subscribes.
MCP server
Give Claude, ChatGPT or your own agent safe, scoped access to build and run a shop.
Landing page script
Track visitors and sell through the Ecomone checkout from pages hosted anywhere.
Scopes
Fine-grained permissions per resource. Merchants see exactly what your integration can do.
Built for merchants' trust
One shop, one key
Every API key belongs to exactly one shop. OAuth tokens can span several shops, and every request names the shop it acts on.
Least privilege
Read and write are separate scopes. Actions that touch money or the live shop have their own scopes and are flagged in these docs.
No secrets in plain text
Secrets and tokens are stored as SHA-256 hashes and shown once. Revoke any key or connection from the Ecomone backend at any time.