Third-party Storefront public API

This entry contains 14 Storefront public reads and 5 hosted backend session foundation operations. These links use the same generated pages as the general API Reference; resources without paths below are not yet available.

• API source commit: 2d63ab5caa6d65c1ea9fe253c5bdfbec77b2a170
• OpenAPI SHA-256: 33f52714521cbd7573bcc808c38dd8dc189d7bafa2fd3a6d4c914b70853357b2

Hosted redirect boundary

Catalog reads remain on the third-party site. The artifact now provides API Key backend session security foundations for hosted login initiate/return and checkout session create/get/cancel, but official login/checkout UI, final order creation, provider payment progression, production configuration, and migrations are not complete; login or payment must not be treated as available. Future browser flows may only use top-level redirects to official Ayalink hosted pages and return to an exact platform-reviewed return URL. A third party must not collect passwords/MFA, forward Ayalink Cookies, handle payment credentials, or proxy a hosted page.

Store identity and bootstrap

• GET /api/v1/runtime-config — Get the public runtime configuration
• GET /api/v1/bootstrap — Get the public site bootstrap configuration
• GET /api/v1/public/contact — Get public contact channels
• GET /api/v1/catalog/merchants/{slug} — Get a public store profile

Configuration and decoration

• GET /api/v1/public/store-access/{store}/config — Get the public store security configuration
• GET /api/v1/storefront-decorations/merchants/{slug} — Get the published Storefront decoration

Categories

• GET /api/v1/catalog/categories — List public categories
• GET /api/v1/catalog/merchants/{slug}/categories — List public categories for a store

Products

• GET /api/v1/catalog/products — List the public product catalog
• GET /api/v1/catalog/products/{slug} — Get a public product by slug
• GET /api/v1/catalog/merchants/{slug}/products — List public products for a store
• GET /api/v1/catalog/merchants/{merchantSlug}/products/{productSlug} — Get a public product for a store

Search

• GET /api/v1/search — Search public products

Public legal content

• GET /api/v1/legal/documents — List current published legal documents by locale

Hosted login backend sessions

• POST /api/v1/open/hosted/login/initiate — Initiate a hosted login session
• POST /api/v1/open/hosted/login/return — Consume a hosted login return

Hosted checkout backend sessions

• POST /api/v1/open/hosted/checkout/sessions — Create a hosted checkout session
• GET /api/v1/open/hosted/checkout/sessions/{sessionId} — Get a hosted checkout session
• POST /api/v1/open/hosted/checkout/sessions/{sessionId}/cancel — Cancel a hosted checkout session

Resource groups not yet available

The current artifact has no operations for these resources, so this site generates no endpoint, parameter, scope, or response:

• Official hosted login UI — Not yet available
• Official hosted checkout UI and provider payment progression — Not yet available
• Final order creation — Not yet available
• SKU and sellable inventory — Not yet available
• Dedicated pricing resource — Not yet available
• Locale and fallback — Not yet available
• Media resources — Not yet available

Price, media, or inventory-related fields in a product schema do not imply a dedicated resource API. Use only the schema actually declared on each operation page.