For developers, by developers

The API surface is the same surface our frontend uses.

Sellix's whole stack — products, orders, customers, fulfillment, license-key delivery, coupons, webhooks, API keys, audit logs — is exposed through a clean JSON REST API. Anything you can do in the dashboard, you can do over HTTPS with a bearer token.

Batteries included, not sold separately.

• Versioned REST API at api.sellix.gg/v1 — predictable URLs, idiomatic verbs, RFC-7807 problem responses.
• Scoped API keys — per-shop, per-ability (read orders / write keys / refund / payout).
• Outbound webhooks with HMAC-SHA256 signing, replay-window protection and configurable retries.
• Signed download URLs so you can ship files without exposing the storage bucket.
• Auto-delivery hooks — drop a webhook URL into a product, every paid order POSTs to your endpoint.
• License-key pools — bulk-upload CSV, set stock to ∞, sell until empty.
• First-class BlockPN integration — connect once per tenant, credentials flow to every shop.

Opinionated where it keeps you safe.

• Tenant-scoped by default — you cannot accidentally cross-read another merchant's data.
• Idempotency keys on every write that creates money movement.
• Webhooks are signed and replay-protected — no, we do not ship "just send the secret in the body".
• Errors are structured, never bare HTML.
• No surprise breaking changes — we run a deprecation window with a header before retiring anything.