Storekeeper

API for developers

Clean REST. Bearer auth. Predictable JSON.

The public API of Storekeeper is a thin, well-shaped REST surface over the platform. One token, flat responses, an OpenAPI spec, and a live reference you can call from the browser. No SDK required — though we generate one for your language anyway.

REST + JSON Bearer token (30 min) OpenAPI 3.0 24 endpoints Europe/Amsterdam dates
Open the interactive reference → OpenAPI spec

Auth in three calls

Get a token, send it, done.

Log in

Exchange your Storekeeper login for a 30-minute bearer token.

Send the token

Add Authorization: Bearer <token> to every other request.

Know who you are

GET /api/me resolves the token to account, roles, and locked location.

# 1. get a token
curl -s https://api.storekeeper.me/api/auth/login \
  -H 'Content-Type: application/json' \
  -d '{"account":"demo","email":"you@example.com","password":"..."}'
# { "token": "...", "expires_in": 1800 }

# 2. call an endpoint
curl -s "https://api.storekeeper.me/api/orders?from=2026-07-01&limit=25" \
  -H "Authorization: Bearer $TOKEN"

# 3. who am i
curl -s https://api.storekeeper.me/api/me \
  -H "Authorization: Bearer $TOKEN"

The surface

24 endpoints, six groups.

POST/api/auth/login
GET/api/me
GET/api/orders
GET/api/orders/{id}/items
GET/api/products
GET/api/product-prices
GET/api/stock
GET/api/customers
GET/api/customer-segments
GET/api/financial-report
GET/api/reports/daily-close
GET/api/reports/product-sales

Plus shops, tax-rates, turnover-groups, payment-methods, and locations to resolve the ids reports emit. Full list in the reference.

Conventions

No surprises.

  • Dates are YYYY-MM-DD in Europe/Amsterdam. Ranges inclusive.
  • Money is decimal euros. _wt = incl. VAT, plain/_ex = excl. VAT.
  • Lists return {count, total, data}; paginated add {start, limit}.
  • Errors are {error, message, status}: 400 / 401 / 404 / 502.

Access & limits

The rules.

This is the only supported way to connect to Storekeeper. No other integration method is recommended or allowed. Your subscription must cover both the volume of calls you make and the scope you access.

Tokens are short-lived (30 minutes); re-authenticate or refresh. Every call acts as you, on your account, within your rights.

Start building.

The interactive reference lets you authorize and fire real requests from the browser. The guide walks the common flows end to end.

Interactive reference Guide & use cases