REST endpoints

rCommerce exposes a versioned HTTP API with JWT auth and API keys. Every resource in the core is reachable over REST, and every state change also fans out as a signed webhook.

Authentication

Send a scoped bearer token on every request:

curl :8080/orders \
  -H "Authorization: Bearer $TOKEN"

Core resources

Resource	Path	Notes
Products	/products	Catalogue, variants and media
Carts	/carts	Server-authoritative carts
Orders	/orders	Read + transition through states
Customers	/customers	Accounts, addresses, consent
Inventory	/inventory	Stock per location and SKU

Conventions

• Money is a string in the currency’s minor unit rules, e.g. "129.00".
• Timestamps are RFC 3339 in UTC.
• Errors return a JSON body with a stable code and human message.
• Pagination uses ?limit= and a cursor returned in the response.