The store's published policies (titles and links)
- Credentials
- Store key
- Scopes
catalog:read
Titles and slugs only, for a footer or sitemap. Fetch a body with GET /v1/store/policies/{slug}. Drafts and empty policies are left out.
Paged: { items, nextCursor }, limit (default 20, at most 50) and an opaque cursor.
Old path, deprecated, sunset 1 Feb 2027: GET /v1/policies.
storeKey catalog:readAuthorizationBearer <sez_pub_... (publishable) or sez_sk_... (secret)>A per-store key from the console. Publishable keys are browser-safe; secret keys are server-only.
Scope: catalog:read
cursor?stringThe nextCursor of the previous page, unchanged. A cursor that is not one we gave you is 400 invalid_parameter.
limit?integerPage size: default 20, at most 50 (more is 50; a missing or unusable value is 20).
1 <= value <= 5020The published policies, in a fixed order (terms, privacy, refunds, shipping).
application/json- response
data*curl -X GET 'https://api.shopeazy.co/v1/store/policies' \ -H 'Authorization: Bearer sez_pub_...'{ "data": { "items": [ { "type": "terms", "slug": "terms", "title": "Terms & Conditions", "nav": "Terms", "updatedAt": 1792924379483 }, { "type": "privacy", "slug": "privacy", "title": "Privacy Policy", "nav": "Privacy", "updatedAt": 1792924379483 }, { "type": "refund", "slug": "refunds", "title": "Refund & Returns Policy", "nav": "Refunds", "updatedAt": 1792924379483 } ], "nextCursor": null, "policies": [ { "type": "terms", "slug": "terms", "title": "Terms & Conditions", "nav": "Terms", "updatedAt": 1792924379483 }, { "type": "privacy", "slug": "privacy", "title": "Privacy Policy", "nav": "Privacy", "updatedAt": 1792924379483 }, { "type": "refund", "slug": "refunds", "title": "Refund & Returns Policy", "nav": "Refunds", "updatedAt": 1792924379483 } ], "count": 4 }}List the store's active catalogues (kits) GET
Paged: `{ items, nextCursor }`, `limit` (default 100, at most 200) and an opaque `cursor`. Old path, deprecated, sunset 1 Feb 2027: `GET /v1/kits`.
One published policy's sanitised HTML GET
The body is re-sanitised on the way out, so it is safe to inject. An unpublished (or empty) policy is `404`, not `403`. Old path, deprecated, sunset 1 Feb 2027: `GET /v1/policies/{slug}`.