API
The Corso Commerce API lets merchants manage order data programmatically—useful for headless storefronts, custom integrations, or any platform not natively supported by Corso.
Commerce API Reference Full endpoint reference, authentication guide, and OAS downloads.
What you can do
Section titled “What you can do”Orders
| Action | Description |
|---|---|
| List orders | Retrieve all orders for your store. |
| Get an order | Retrieve a specific order by ID, including isShippingProtected status. |
Store
| Action | Description |
|---|---|
| Get a store | Retrieve your store configuration (including base currency). |
Fulfillments
| Action | Description |
|---|---|
| List order fulfillments | Retrieve all fulfillments for a given order. |
Line Items
| Action | Description |
|---|---|
| Get a line item | Retrieve a specific line item by ID. |
Claims
| Action | Description |
|---|---|
| Get a claim | Retrieve a specific return or warranty claim by ID. |
| List claims | Retrieve all claims for your store. |
Shipping Claims
| Action | Description |
|---|---|
| Get a shipping claim | Retrieve a specific shipping protection claim by ID. |
| List shipping claims | Retrieve all shipping protection claims for your store. |
| Create a shipping claim | Submit a new shipping protection claim for a protected order. |
Registrations
| Action | Description |
|---|---|
| Get a registration | Retrieve a specific product registration by ID. |
| List registrations | Retrieve all product registrations for your store. |
How it works
Section titled “How it works”Most operations are read-only GET requests—retrieving orders, line items, fulfillments, and store configuration. The only POST is for creating a shipping protection claim. Corso uses this data to handle shipping protection claims, returns, and customer lookups.
Rate limits
Section titled “Rate limits”The API allows 100 requests per minute per store. Responses include RateLimit-Limit, RateLimit-Remaining, and RateLimit-Reset headers. If you exceed the limit, the API returns 429 Too Many Requests with a Retry-After header.