Skip to content
Get API key (opens in a new tab)

Authentication

Authenticate Storefront API requests with your workspace's publishable key, sent as a bearer token.

View as Markdown (opens in a new tab)

The Storefront API authenticates every request with your workspace's publishable key. Scopes are not required.

Find your publishable key

Your workspace's publishable key is in the Publishable key panel on Settings → Integrations → Cevoid API⁠. Publishable keys start with cev_pk_.

Use this key for storefront reads, including server-rendered rich snippets. It identifies your workspace but cannot perform authenticated management actions. Save it in your storefront configuration.

Send the key

Send your publishable key as a bearer token:

Authorization: Bearer cev_pk_example

For example, to fetch posts for a market:

curl "https://api.widget.cevoid.com/v1/posts?market=mar_sweden" \
  -H "Authorization: Bearer ${CEVOID_PUBLISHABLE_KEY}"

A request without a key, or with any key that is not a publishable key, returns 401 with the code unauthorized. Secret keys do not work with the Storefront API.

Publishable and secret keys

The Storefront API reads public storefront data only. To read or change workspace data from your server, use the Cevoid API with a scoped secret key: see Authentication.

Some storefront integrations use both. A custom UGC experience fetches posts with the publishable key, but discovers market IDs and curation labels on your server with a secret key, through GET /v2/markets and GET /v2/labels.