Skip to main content
GET
Describe v2 API capabilities

Authorizations

Authorization
string
header
required

OAuth 2.0 with opaque bearer tokens. Authorization-code requests require PKCE S256.

Scopes

products.read

Read products, product variations, tags, and catalog metadata.

categories.read

Read product categories, subcategories, and category metadata.

vendors.read

Read vendor profiles.

locations.read

Read tenant locations for location_id discovery.

Headers

X-API-Version
string

Pin a dated API release (YYYY-MM-DD). Omit for the latest (2026-06-09). Unknown values return 400 unsupported_api_version; the resolved version is echoed back in the X-API-Version response header.

Pattern: ^\d{4}-\d{2}-\d{2}$
Example:

"2026-06-09"

Response

v2 capability map.

success
boolean
capabilities
object[]