ShopSTAR3 is built to connect. Every significant event on a store — an order placed, a product updated, inventory changing — can be pushed to any external system in real time. API access is scoped, audited, and revocable. Marketplace channels sync automatically. The integration layer is a first-class platform capability, not a workaround.
Webhooks#
Configure outbound webhooks to push store events to external systems in real time. Each webhook subscription specifies:
- Target URL — the endpoint that will receive the HTTP POST
- Events — one or more event types to subscribe to (e.g.
order.placed,product.updated,inventory.updated) - Signing secret — a secret used to sign each delivery payload with HMAC-SHA256, so the receiving system can verify authenticity
The platform makes at least one delivery attempt immediately on each matching event. If delivery fails (non-2xx response or timeout), it retries automatically with exponential backoff. After repeated failures the delivery is dead-lettered and visible in the delivery log, where it can be manually re-triggered.
Each subscription shows a full delivery log — status, HTTP response, attempt number, and timestamp — for debugging.
API Credentials#
Create and manage API keys or OAuth 2.0 client credentials for external applications that need programmatic access to the store. Each credential is:
- Scoped to specific resources and actions (e.g.
catalog:read,orders:read,inventory:write) - Assigned an optional expiry date
- Named for identification (e.g. “Inventory Sync App”, “BI Connector”)
The secret value is shown exactly once at creation time and is not retrievable afterward. Credentials can be deactivated at any time without deleting the configuration.
Connectors#
Configure marketplace and platform connectors to keep the store in sync with external channels. Available connectors:
| Connector | Sync direction | What it syncs |
|---|---|---|
| Amazon | Bidirectional | Listings, inventory levels, fulfillment confirmations |
| eBay | Outbound | Listings and inventory levels |
| Google Shopping | Outbound | Product feed updates to Google Merchant Center |
Each connector is activated per store with its own credentials and configuration. Connector credentials are stored securely and are not visible after setup. Sync activity and errors are visible in the connector log.