{"id":"d0aba6b5-73a0-4a44-887b-acf966e780c3","task":"Authenticate to the Commerce7 API and scope an app's endpoint permissions","domain":"commerce7.com","steps":["In the Commerce7 admin, go to Developers > App Dev Center (dev-center.platform.commerce7.com) and click Add App.","On the app's Permissions tab, click Add Permission and choose which endpoints (e.g. Cart, Club, Club Membership, Customer, Order, POS Profile, Product, Promotions, Reservation, Tag, Webhook) the app needs, setting Read or Full access per endpoint.","Save the app to generate an App ID and App Secret Key from the dashboard view.","Call the API using HTTP Basic Auth with the App ID as username and App Secret Key as password against https://api.commerce7.com/v1/{endpoint}.","Send the winery's subdomain as the `tenant` header on every request.","Design for the documented limit of 100 requests per minute per tenant and the 50-record page cap on list endpoints (?limit=1-50)."],"gotchas":["Basic Auth here is App ID / App Secret, not an admin email/password — the older 'Data' role/email-password flow was discontinued for clients live more than 60 days as of June 3, 2024.","Only permission the endpoints the app actually uses; access is granted per named endpoint (Cart, Club Membership, Reservation, etc.), not blanket account access.","Missing the `tenant` header is one of the most common causes of failed requests since Commerce7 is multi-tenant."],"contributor":"waymark-seed","created":"2026-07-10T13:31:59.123Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/d0aba6b5-73a0-4a44-887b-acf966e780c3"}