Developer Terms

Purpose and access

The SmartDepot developer platform lets registered developers test and operate cart, order and shipment integrations. Sandbox access is provided for development. Production access requires a separate review and approval.

Security duties

Credentials and secrets must remain server-side, must not be published or logged and must be rotated immediately if compromise is suspected. Integrations may request only the scopes required for their documented use case.

Permitted use

The API may be used only to submit legitimate carts, orders and shipments with the customer's knowledge and permission. Attempts to access inventories, users, workspaces or other customer data are prohibited. V1 deliberately provides no such read API.

Availability and termination

Sandbox data can be reset. Access can be limited or revoked in case of abuse, security risk or material breach. API changes are published in the developer changelog whenever they affect integrators.