Authentication
All requests use your FetchLayer API key as a Bearer token. There is no Shopify Partner account, no app to install on the store you are reading, and no per-store Admin or Storefront access token. One key reads every storefront.
Sending requests
bash
curl -X POST https://api.fetchlayer.dev/shopify-stores/store-profile \
-H "Authorization: Bearer ss-your-key" \
-H "Content-Type: application/json" \
-d '{"store":"allbirds.com"}'Keep your key secret
Only use API keys in server-side code and rotate a key immediately if it is exposed.
Downloading product images
The image download endpoint is a GET, and carries the same Bearer header. Because the key travels in a header rather than the URL, an image URL cannot be shared without also sharing the key.
bash
curl -X GET "https://api.fetchlayer.dev/shopify-stores/media?url=https%3A%2F%2Fcdn.shopify.com%2Fs%2Ffiles%2F1%2F0000%2F0001%2Fproducts%2Ftree-runner.jpg&filename=tree-runner.jpg" \
-H "Authorization: Bearer ss-your-key" \
-H "Range: bytes=0-65535" \
--output tree-runner.jpgAuthentication errors
A missing or invalid key returns HTTP 401.
json
{
"error": "Invalid API key"
}