GET
https://api.posnova.store/v1/store

Store Profile

Returns the profile of the store that owns the API key: name, domains, branding, theme, SEO fields, contact details, currency, and sanitized storefront settings. No query parameters — the store is resolved from your key.

Request Example

cURL
curl "https://api.posnova.store/v1/store" \
  -H "Authorization: Bearer pn_live_YourSecretKey"
JavaScript
const res = await fetch("https://api.posnova.store/v1/store", {
  headers: { Authorization: `Bearer ${process.env.POSNOVA_API_KEY}` },
});
const { data, pagination } = await res.json();

JSON Response

{
  "success": true,
  "data": {
    "id": 42,
    "name": "Acme Electronics",
    "subdomain": "acme",
    "customDomain": "shop.acme.com",
    "currency": "USD",
    "logo_url": "https://…/logo.png",
    "primary_color": "#0ea5e9",
    "seo_title": "Acme Electronics — Official Store",
    "payment_settings": {
      "methods": [
        { "methodId": "cod", "enabled": true, "hasCredentials": true },
        { "methodId": "ssl_commerz", "enabled": true, "isSandbox": true, "hasCredentials": true }
      ]
    },
    "ecommerce_settings": { "template_id": "template_sellzy" }
  }
}

Sanitized by design

Gateway credentials never appear in API responses. Each payment method exposes a hasCredentials boolean — enough to decide whether to show that option at checkout, nothing more. Secret-looking keys are stripped from all settings objects at both the database and application layers.

Status: Operational

Products API