Libraries tagged by scopes

Build a fully custom headless storefront - your own web app, mobile app, or POS - against a single OE Commerce store. Every endpoint below is namespaced under `/api/v1/store/...`. Building admin/back-office tooling instead? See [/docs/admin](/docs/admin). New here? [/guides/store](/guides/store) walks through getting a key, the anonymous cart session, and calling your first endpoints step by step - this page is the field-level reference to come back to afterward. ## Getting Started 1. Click the **Authorize** button at the top of this page. 2. Provide credentials: - **X-Commerce-Key** (always required) - your store's Store Access Key from Backoffice > Settings > Application APIs. `pk_store_...` (publishable) is safe for browser/mobile code; `sk_store_...` (secret) is server-to-server only and is rejected outright if a browser Origin header is present. - **Bearer** (only for endpoints acting on a specific customer - Account, Orders, Wishlists, etc.) - the token from **Auth > register** or **Auth > login**. Once authorized, you can explore and test all available endpoints directly from this interface. ## Anonymous Carts A guest cart is tracked by an `X-Session-Ref` header, not a cookie - the server generates one on your first request and echoes it back on every response after. Keep sending back whatever value you last received. Logging in carries that same cart forward onto the customer's account automatically, with no separate merge step. ## Errors Failures use RFC 9457 Problem Details (`application/problem+json`) with a stable `code` field for programmatic handling, e.g. `store_key_invalid`, `store_key_revoked`, `store_key_scope_denied`, `rate_limited`. A rejected *business* action (e.g. adding fewer than a product's minimum order quantity to the cart) instead comes back as HTTP 200 with `"success": false` and a human-readable `message` - always check `success` in the body, not just the HTTP status code. ## Rate Limits Requests are limited per Store Access Key (200/minute). The credential-stuffing surface (register/login/forgot-password/reset-password) is limited more tightly per caller IP (10 per 5 minutes). A 429 response includes a `Retry-After` header.

Go to Download

Declarative search, sort, and filter scopes for Eloquent models — with relationship traversal.

Go to Download

Add some custom scopes on models to make a better selection via requests

Go to Download

Add stage scopes to models with parents

Go to Download

WordPress plugin for displaying data from the public scope of multiple ORCID profiles on pages, posts, and sites.

Go to Download

WordPress plugin for displaying data from the public scope of multiple ORCID profiles on pages, posts, and sites.

Go to Download

Official PHP SDK for LogTide - log management with Hub/Scope architecture, tracing, breadcrumbs, and integrations

Go to Download

Instagram Feed for Silverstripe Elemental features Basic Display PHP API (instagram_business_basic scope)

Go to Download

TYPO3 extension for the LABOR.digital Factory headless CMS boilerplate — ships Content Blocks, record types, tenant-scope enforcement, and provisioning CLIs for single-tenant and shared-tenant installations.

Go to Download

An optimized scope violation validator for PocketMine-MP 5.

Go to Download

Reusable scope-protected blade blocks, with empty I/O on runtime (replacement for @include which uses native I/O based PHP includes).

Go to Download

Filter Laravel Eloquent results by URL query strings and Eloqunet's scopes.

Go to Download

An alternative to the native WP function `get_template_part` that can pass arguments to the local scope

Go to Download

Command line tool for locating command line tools in a parent or project scope

Go to Download

Filter scope for Eloquent models

Go to Download