Skip to main content
API keys let external systems authenticate against the TWICE Commerce API — the same API that powers the admin. Use them for integrations, scripts, and headless storefronts.

​
How it works

You create and manage API keys in Settings → Integrations under API access. Each key belongs to your account and acts on its behalf.
API keys are not scoped. Every key receives owner-level permissions: it can call every route on your account, including reads and writes to orders, customers, inventory, and settings. There are no per-key scopes or role restrictions. Treat a key like an owner password — store it as a secret, never commit it to source control, and rotate it immediately if it leaks.
All requests go to https://server.twicecommerce.com. Send the key in the X-API-KEY header on every request. For example, list your catalog items:

​
Usage

  1. Open Settings → Integrations and go to API access.
  2. Create a key and copy it — the full value is shown only once.
  3. Add it to your integration as the X-API-KEY request header.
  4. Revoke a key from the same screen when it is no longer needed.

​
Rate limits

The API limits requests in three layers:
  • Per IP — pre-authentication protection. Each client IP has a per-minute request budget. Requests with missing or bot-like user agents consume more of the budget per call.
  • Per account — all authenticated traffic on your account, admin dashboard and API keys combined, shares a per-minute limit that scales with your plan.
  • Per API key — each key has a sustained requests-per-second rate, a short-term burst allowance, and a monthly request cap. All three scale with your plan; the monthly cap is the API call allowance that pools across all your locations.
Responses carry rate limit headers: When a request exceeds a limit, the API returns 429 Too Many Requests. Wait for Retry-After seconds before retrying. See pricing for the allowances on each plan.

API reference

Browse every endpoint.

Webhooks

Receive events when data changes.

Integrations settings

Manage keys and connected systems.