The Smile API uses HTTP Bearer Authentication (also known as token authentication) to authenticate requests. API requests are always made on behalf of a specific store/merchant/account, however the bearer value you supply depends on the entity that is making the API request:Documentation Index
Fetch the complete documentation index at: https://dev.smile.io/llms.txt
Use this file to discover all available pages before exploring further.
- Merchants - Use an API key.
- Apps - Use the
OAuth Access Tokenyou received after the merchant completed OAuth.
Authorization header of the request.
These secret keys and tokens carry many privileges, so be sure to keep them a safe. Do not use or include them in publicly accessible areas such as mobile application binaries, client-side code, or in GitHub repositories. Only make API calls that include these secrets from secured backend code.
All API requests must be made over HTTPS.