The storeVero API

curl -X POST https://storevero.com/api/v1/ecommerce/products \
  -H "Authorization: Bearer YOUR_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Aroma Diffuser",
    "price": 1499,
    "sku": "AD-001",
    "stock": 50,
    "category_id": 3,
    "is_active": true
  }'

await fetch('https://storevero.com/api/v1/ecommerce/products', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${token}`,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    name: 'Aroma Diffuser', price: 1499,
    sku: 'AD-001', stock: 50, category_id: 3, is_active: true
  })
});

Http::withToken($token)->post(
  'https://storevero.com/api/v1/ecommerce/products', [
    'name' => 'Aroma Diffuser', 'price' => 1499,
    'sku' => 'AD-001', 'stock' => 50, 'category_id' => 3, 'is_active' => true,
]);

{
  "ok": true,
  "data": {
    "id": 41, "workspace_id": 12, "name": "Aroma Diffuser", "slug": "aroma-diffuser",
    "price": "1499.00", "sku": "AD-001", "stock": 50,
    "category_id": 3, "is_active": true,
    "created_at": "2026-07-29T10:20:31.000000Z",
    "variants": []
  }
}

curl -X POST https://storevero.com/api/v1/ecommerce/fulfillments \
  -H "Authorization: Bearer YOUR_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "order_id": 1042,
    "line_items": [{ "order_item_id": 311, "quantity": 1 }],
    "carrier": "Delhivery",
    "tracking_number": "IN123456789",
    "tracking_url": "https://www.delhivery.com/track/package/IN123456789"
  }'

await fetch('https://storevero.com/api/v1/ecommerce/fulfillments', {
  method: 'POST',
  headers: { 'Authorization': `Bearer ${token}`, 'Content-Type': 'application/json' },
  body: JSON.stringify({
    order_id: 1042,
    line_items: [{ order_item_id: 311, quantity: 1 }],
    carrier: 'Delhivery', tracking_number: 'IN123456789'
  })
});

Http::withToken($token)->post(
  'https://storevero.com/api/v1/ecommerce/fulfillments', [
    'order_id' => 1042,
    'line_items' => [['order_item_id' => 311, 'quantity' => 1]],
    'carrier' => 'Delhivery', 'tracking_number' => 'IN123456789',
]);

curl -X POST https://storevero.com/api/v1/ecommerce/inventory/adjust \
  -H "Authorization: Bearer YOUR_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "product_id": 41, "quantity": -3, "reason": "sale" }'

await fetch('https://storevero.com/api/v1/ecommerce/inventory/adjust', {
  method: 'POST',
  headers: { 'Authorization': `Bearer ${token}`, 'Content-Type': 'application/json' },
  body: JSON.stringify({ product_id: 41, quantity: -3, reason: 'sale' })
});

Http::withToken($token)->post(
  'https://storevero.com/api/v1/ecommerce/inventory/adjust', [
    'product_id' => 41, 'quantity' => -3, 'reason' => 'sale',
]);

curl -X POST https://storevero.com/api/v1/bulk/products \
  -H "Authorization: Bearer YOUR_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "product_ids": [41, 42, 43], "action": "adjust_price_percent", "value": -10 }'

curl -X POST https://storevero.com/api/v1/ecommerce/storefront/demo/orders \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -d '{
    "email": "buyer@example.com",
    "first_name": "Asha", "last_name": "Kumar", "phone": "9800000000",
    "address1": "12 MG Road", "city": "Pune", "state": "Maharashtra", "zip": "411001", "country": "IN",
    "items": [{ "product_id": 41, "quantity": 2 }],
    "payment_method": "cod"
  }'

await fetch('https://storevero.com/api/v1/ecommerce/storefront/demo/orders', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json', 'Accept': 'application/json' },
  body: JSON.stringify({
    email: 'buyer@example.com',
    first_name: 'Asha', last_name: 'Kumar', phone: '9800000000',
    address1: '12 MG Road', city: 'Pune', state: 'Maharashtra', zip: '411001', country: 'IN',
    items: [{ product_id: 41, quantity: 2 }],
    payment_method: 'cod'
  })
});

Http::acceptJson()->post('https://storevero.com/api/v1/ecommerce/storefront/demo/orders', [
  'email' => 'buyer@example.com',
  'first_name' => 'Asha', 'last_name' => 'Kumar', 'phone' => '9800000000',
  'address1' => '12 MG Road', 'city' => 'Pune', 'state' => 'Maharashtra', 'zip' => '411001', 'country' => 'IN',
  'items' => [['product_id' => 41, 'quantity' => 2]],
  'payment_method' => 'cod',
]);

query ProductByHandle($handle: String!) {
  productByHandle(handle: $handle) {
    id
    title
    handle
    priceRange { minVariantPrice { amount currencyCode } }
    images(first: 3) { edges { node { url altText } } }
  }
}

curl -X POST https://storevero.com/api/v1/storefront/graphql \
  -H "X-Shopify-Storefront-Access-Token: YOUR_STOREFRONT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "query": "{ productByHandle(handle: \"aroma-diffuser\") { title } }" }'

mutation {
  cartCreate(input: { lines: [{ merchandiseId: "41", quantity: 2 }] }) {
    cart { id checkoutUrl
      lines(first: 10) { edges { node { quantity } } }
    }
  }
}

Content-Type: application/json
X-StoreVero-Topic: orders/create
X-StoreVero-Event-Id: 5f0c1a9e-…
X-StoreVero-Hmac-Sha256: 3q2+7w…=        (only when a secret is set)

{
  "id": "5f0c1a9e-…",
  "topic": "orders/create",
  "created_at": "2026-09-15T10:20:31+00:00",
  "workspace": 12,
  "data": { /* the order, fulfilment, refund or draft order */ }
}

$payload = file_get_contents('php://input');
$signature = $_SERVER['HTTP_X_STOREVERO_HMAC_SHA256'] ?? '';
$expected = base64_encode(hash_hmac('sha256', $payload, $webhookSecret, true));
if (! hash_equals($expected, $signature)) {
  http_response_code(401); exit;
}
// ✓ verified — parse and handle
$event = json_decode($payload, true);

import crypto from 'crypto';
// rawBody: the exact bytes received (not re-serialised JSON)
function verify(rawBody, signature, secret) {
  const expected = Buffer.from(crypto.createHmac('sha256', secret)
    .update(rawBody).digest('base64'));
  const given = Buffer.from(signature || '');
  return given.length === expected.length && crypto.timingSafeEqual(expected, given);
}