MCP

HTTP JSON-RPC at POST /api/v1/mcp with the same Bearer auth and scopes as the REST API.

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/list",
  "params": {}
}

Cursor example: point an MCP HTTP transport at your Ettajer origin /api/v1/mcp and set the Authorization header to a merchant API key or OAuth access token.

Preview & publish

preview_theme — issues a short-lived signed preview URL (read-only, ~10 minutes). Works on homepage, product, collection, and custom pages.
publish_theme — requires themes:publish; transactional; removes orphan custom pages from the live storefront.

Rate limiting

Default RATE_LIMIT_BACKEND=memory is suitable for local or single-instance development. Production multi-instance deployments should set RATE_LIMIT_BACKEND=redis with Upstash REST credentials. In-memory limits are not distributed across instances.