Build apps, embeds, themes, and automation for Sellstream sellers
Ship OAuth apps, embedded dashboards, checkout extensions, storefront templates, analytics packs, and delivery automations with seller-owned credentials and scoped installs.
App scaffold
The starter manifest, webhooks, and runtime shell are aligned to the marketplace flow.
{
"name": "partner-app",
"app_type": "oauth",
"scopes": ["orders:read", "storefront:write", "webhooks:write"],
"redirect_urls": ["http://localhost:3000/oauth/callback"],
"webhooks": [
{ "target_url": "http://localhost:3000/webhooks/sellstream", "events": ["order.completed", "delivery.failed"] }
]
}Create
Configure scopes, callback URLs, webhook endpoint, embedded URL, and listing copy.
Test
Run a sandbox install, verify OAuth exchange, and launch the embedded runtime shell.
Submit
Send checklist, docs, billing, and security details to the partner review queue.
Launch
Publish to the app marketplace with install analytics, payouts, reviews, and rankings.
@sellstream/app-sdk
Typed client, webhook signing helpers, embedded App Bridge, and manifest scaffolding.
npm install @sellstream/app-sdk
import { SellstreamClient, createSellstreamAppManifest } from '@sellstream/app-sdk';
const client = new SellstreamClient({ apiKey: process.env.SELLSTREAM_API_KEY! });
const manifest = createSellstreamAppManifest({
name: 'partner-app',
scopes: ['orders:read', 'storefront:write', 'webhooks:write'],
});sellstream-app init
Generate a runnable app skeleton with a manifest, webhook test harness, docs, and env file.
npx sellstream-app init my-app npx sellstream-app docs my-app/sellstream.app.json my-app/APP_DOCS.md npx sellstream-app manifest my-app npx sellstream-app doctor
Signed webhooks
Handle signed events, replay failures, and keep delivery processing idempotent.
return handleWebhookRequest(request, {
secret: process.env.SELLSTREAM_WEBHOOK_SECRET!,
async onEvent(event) {
console.log(event.event, event.data);
},
});Embedded runtime
Navigate, toast, resize, and request context from within an embedded dashboard app.
const bridge = createAppBridge(window, 'https://sellstream.xyz');
bridge.ready();
bridge.toast('Settings saved', 'success');
bridge.resize(document.body.scrollHeight);@sellstream/mcp-server
Expose storefront setup, products, coupons, stock, webhooks, and full dashboard API access to MCP-capable AI clients.
npm run build -w @sellstream/mcp-server SELLSTREAM_API_BASE_URL=https://api.sellstream.xyz SELLSTREAM_API_KEY=sk_xxx SELLSTREAM_ADMIN_TOKEN=optional_dashboard_token node packages/mcp-server/dist/index.js
Let third-party tools connect to seller inventory, orders, and storefront data
Crosslisting tools, inventory managers, analytics apps, and automation platforms can install into a seller shop with scoped OAuth instead of asking for raw dashboard credentials.
https://sellstream.xyz/api/commerce/oauth/authorize ?response_type=code &client_id=ss_app_... &redirect_uri=https://partner.example/oauth/callback &scope=products:read products:write orders:read &state=random_csrf_value
Authorize
GET /api/commerce/oauth/authorizeSend the seller here with client_id, redirect_uri, scope, state, and response_type=code.
Approve
/oauth/authorize/consentSellstream shows the scoped consent screen and redirects back to your callback with a short-lived code.
Token
POST /api/commerce/oauth/tokenExchange the code with your client secret for a one-hour access token and rotating refresh token.
Call API
Authorization: Bearer ss_app_live_*Use the token against public API routes for the installed shop and approved scopes.
Refresh/Revoke
POST /api/commerce/oauth/token or /revokeRotate tokens before expiry, revoke on uninstall, or introspect active access tokens.
OAuth and BYOK
Apps use scoped installs, callback URLs, token exchange, and merchant-owned provider credentials instead of platform-wide shared keys.
Events and webhooks
Subscribe to order, delivery, customer, dispute, checkout, and provider events with replay tooling in the merchant dashboard.
Marketplace revenue
Listings support pricing, revenue share, payout queues, reviews, moderation, ranking, install analytics, and certification status.
API surface
Commerce API
Products, orders, discounts, storefront assets, and fulfillment state.
Marketplace API
Listings, installs, reviews, rankings, revenue share, and moderation.
Developer API
App records, partner onboarding, diagnostics, and AI-assisted generation.
Storefront API
Theme files, sections, embeds, versioning, and publish workflow.
Analytics API
Funnel, cohort, revenue, experiment, and export primitives.
Operations API
Webhook delivery, subscriptions, support, and risk tooling.
Core scopes
orders:readRead order status, totals, delivery context, and attribution.
products:writeManage catalog records, stock, delivery recipes, and product metadata.
storefront:writeInstall sections, theme files, app embeds, and page templates.
webhooks:writeSubscribe to checkout, delivery, dispute, and customer lifecycle events.
analytics:readRead funnels, cohorts, revenue, campaign, and experiment metrics.