All Sellfern API requests require a bearer token in theDocumentation Index
Fetch the complete documentation index at: https://docs.sellfern.com/llms.txt
Use this file to discover all available pages before exploring further.
Authorization header. Tokens are created in the Sellfern UI and are scoped to specific capabilities — a token only grants access to the endpoints its scopes permit.
Creating an API token
Create a token
Click Create Token, enter a descriptive name, and select the scopes your integration needs. See the Scopes reference for the full list.
Using the token
Pass the token in theAuthorization header on every request:
Error codes
| HTTP status | Code | Meaning |
|---|---|---|
401 | unauthorized | Token is missing, invalid, or has been revoked. |
403 | missing_scope | Token is valid but lacks the required scope for this endpoint. |
Token security tips
- Use environment variables — never hardcode a token in source code or commit it to version control.
- One token per integration — create a separate token for each service or script so you can revoke individual access without disrupting others.
- Scope minimally — only grant the scopes the integration actually needs. A read-only analytics bot does not need
orders:write. - Rotate periodically — revoke and replace tokens on a regular schedule, or immediately if you suspect a token has been exposed.
