Introduction
FreshlyCart Public API v1 is a server-to-server JSON API at /api/v1 on the configured FreshlyCart HTTPS host. It is read-rich and write-deliberate.
Merchant-owned automations use Personal API Tokens. Approved third-party applications use OAuth 2.0 with merchant-owner consent. Neither credential type replaces the other.
Current safe writes cover customer contacts, simple catalog resources, inventory adjustments, and unpaid server-priced draft orders. Payment capture, refunds, order completion, fiscal writes, provider credentials, and workforce mutations are not exposed.