Introducing the public storefront API (Phase 1)

Your storefront is now readable over an API. Today we're shipping Phase 1 of the public storefront API — a read-only surface at /api/public/storefront/* that lets you pull your own storefront's data programmatically, authenticated with your vendor API key. It's the first consumer-facing use of those keys, and the foundation for building headless or fully custom storefronts on top of Btab.

The API covers the parts of a storefront you'd actually want to render yourself: your site, your product catalog and individual product detail, product reviews and related products, categories, and search — all as plain GET requests. Every call is scoped to the vendor that owns the key, so a key only ever sees its own data, and a request for a different vendor is rejected outright. Requests are rate-limited (300 per minute by default) to keep integrations well-behaved.

To be clear about scope: this first release is reads only. There's no checkout, no writes, and no draft or unpublished data exposed through the public surface — those stay behind the dashboard. What you get is a clean, key-authenticated way to read your live storefront, which is everything you need to start building a custom front end or wiring Btab data into your own tools.

This is Phase 1 of a larger headless push, and we're starting deliberately narrow: a small, safe surface built directly on the same handlers that power our own storefronts, so what you read through the API is always exactly what we serve. More is on the way — if you're building on it, we'd love to hear what you need next.