Build anything on Shoprocket

Drop-in widget, REST API, and webhooks. Same backend that powers the dashboard, same rate limits, same catalogue model. No lock-in.

How it fits together

Every Shoprocket store has three things you'll interact with as a developer:

  1. The widget. A JavaScript bundle you embed on your own site. Handles catalogue, cart, and checkout UI, and calls our Public API under the hood. You never need to touch that API directly unless you want a fully headless build.
  2. The Public API. The browser-safe API the widget speaks. Read products, manage a cart by token, submit checkout. Anyone can call it from a browser.
  3. The Private API. The authenticated API for your own server-side integrations. Create products, manage inventory, read orders, push updates from your ERP, whatever you need.

Base URLs

APIBase URLAuth
Publichttps://api.shoprocket.io/v3/publicPublic key (pk_)
Admin (private)https://api.shoprocket.io/v3/privateSecret key

All requests are HTTPS only. Both APIs return JSON. Errors follow a consistent shape documented in the API reference.

Public endpoints are safe to call from the browser. Private endpoints must only be called from your server, since your secret key must never be shipped to a client.

Besoin d'aide ?

  • Bug or unclear doc? Ping us on chat (bottom-right of this page) or email dev@shoprocket.io.
  • Building something public? We'd love to hear about it. Partner listings and integration credits are available.

Dernière mise à jour : 27 avril 2026

Full changelog →

Stuck on something?

Our dev team replies fast. Email us with code samples or open chat for a quick question.

dev@shoprocket.io