API Documentation

The Enterprise Headless SaaS platform exposes a RESTful API for all platform features. Authenticate using your organisation API key.

Authentication

All API requests (except public endpoints) require an API key in the request header:

Authorization: Bearer sk_live_your_api_key_here
Content-Type: application/json

Base URL

https://enterprise-headless-saas-production.up.railway.app

Authentication

GET
/auth/login

Initiate Auth0 login flow

🌐 Public
GET
/auth/logout

Log out current user

🌐 Public
GET
/auth/callback

Auth0 callback handler

🌐 Public

Organisations

POST
/api/orgs

Create a new organisation

🔑 Auth required
GET
/api/orgs/by-slug?orgSlug=

Get organisation by slug

🔑 Auth required

API Keys

GET
/api/api-keys?orgSlug=

List all API keys for org

🔑 Auth required
POST
/api/api-keys

Create a new API key

🔑 Auth required
DELETE
/api/api-keys

Revoke an API key

🔑 Auth required

Agency

GET
/api/agency/clients?orgSlug=

List all client orgs

🔑 Auth required
POST
/api/agency/clients

Create a new client org

🔑 Auth required
POST
/api/white-label

Save white label settings

🔑 Auth required

Commerce

GET
/api/shopify/stores?orgSlug=

List connected Shopify stores

🔑 Auth required
POST
/api/shopify/stores

Connect a Shopify store

🔑 Auth required
POST
/api/shopify/sync

Sync products from Shopify

🔑 Auth required

Enterprise

POST
/api/enterprise/sla

Save SLA policy

🔑 Auth required
POST
/api/enterprise/compliance

Save compliance config

🔑 Auth required
POST
/api/enterprise/sso

Save SSO configuration

🔑 Auth required

Franchise

GET
/api/franchise/locations?orgSlug=

List franchise locations

🔑 Auth required
POST
/api/franchise/locations

Add a new location

🔑 Auth required

Billing

POST
/api/billing/checkout

Create Stripe checkout session

🔑 Auth required
POST
/api/webhooks/stripe

Stripe webhook receiver

🌐 Public

Rate Limiting

General API

10 requests / 10 seconds

Billing

5 requests / 60 seconds

API Keys

20 requests / 60 seconds

Ready to get started?

Create your account