API

Generate

POST /api/v1/generate
POST /api/v1/generate/stream
POST /api/v1/ui-event
POST /api/v1/ui-event/stream

GET streaming is disabled (EventSource auto-reconnect would re-bill LLM calls).

Shopware versions

GET /api/v1/shopware-versions
GET /api/v1/shopware-versions?refresh=1

Discovers major.minor lines from Packagist shopware/core. supported = curated for generation; preview = released but docs not fully ingested yet.

Docs / vector RAG

POST /api/v1/docs/search
GET /api/v1/docs/status
POST /api/v1/docs/ingest

Local TF-IDF index auto-ingests shopwareDocCatalog on boot. Point DOCS_VECTOR_ENDPOINT at /api/v1/docs/search or an external store; optional DOCS_VECTOR_INGEST_URL receives upserts.

Brief / Agency

POST /api/v1/brief/recommend
POST /api/v1/brief/deepen
GET /api/v1/agency/templates
POST /api/v1/agency/templates/render
GET /api/v1/agency/disclaimer

Deterministic App vs Plugin lock + payments/GDPR follow-ups. Agency templates are operational checklists with a not-legal-advice disclaimer — not AVV text or Account approval.

Ship to Store

GET /api/v1/ship/checklist
GET /api/v1/ship/cli-status
GET /api/v1/ship/account-credentials
PUT /api/v1/ship/account-credentials
DELETE /api/v1/ship/account-credentials
POST /api/v1/ship/config-zip
POST /api/v1/ship/deploy-artifacts
POST /api/v1/ship/probe-deploy
POST /api/v1/ship/upload

Option 1: config-only ZIP → shopware-cli extension validate → account producer extension upload (waits for automatic Store validation). Deploy artifacts = Dockerfile stubs only; probe-deploy verifies /health. Producer OAuth credentials are encrypted at rest; never returned after save. Host needs shopware-cli (see SHOPWARE_CLI_BIN). CI template: templates/github-actions/release-shopware-app.yml.

Shopware shop connections (MCP)

GET /api/v1/shop-connections
POST /api/v1/shop-connections
GET /api/v1/shop-connections/:id
PATCH /api/v1/shop-connections/:id
DELETE /api/v1/shop-connections/:id
POST /api/v1/shop-connections/:id/health
GET /api/v1/shop-connections/:id/tools
POST /api/v1/shop-connections/:id/tools/call

Connect to a merchant shop's native /api/_mcp endpoint. Credentials stay encrypted at rest and are never returned by the API. Requires Shopware 6.7.11+ with MCP_SERVER=1.

Runs & metrics

GET /api/v1/runs
GET /api/v1/runs/metrics
GET /api/v1/runs/:id
GET /api/v1/runs/:id/checklist.md

Account (GDPR)

GET /api/v1/account/export
DELETE /api/v1/account

Previews

POST /api/v1/previews
GET /api/v1/previews
GET /api/v1/previews/:id
DELETE /api/v1/previews/:id

Telemetry

GET /api/v1/telemetry/metrics
GET /api/v1/telemetry/stream

Store Pre-flight

POST /api/v1/audit/store
multipart: file, extensionType, runGuard

Migration Hub

POST /api/v1/migrate/analyze
multipart: file, targetVersion

Billing

GET /api/v1/billing/status
POST /api/v1/billing/checkout
POST /api/v1/billing/portal

Agency workspaces

GET /api/v1/workspaces/me
POST /api/v1/workspaces
POST /api/v1/workspaces/join
POST /api/v1/workspaces/rotate-invite
POST /api/v1/workspaces/remove-member