# Wendoshop Developers

> Official documentation for the Wendoshop public API and MCP server.

Each API key belongs to one store, and every request is resolved in that context. Authentication uses `Authorization: Bearer <token>`. MCP is a separate surface that publishes its own catalog and uses OAuth authorization. Never include real credentials in prompts, public code, URLs, or frontend files.

## Getting started

- [Introduction](https://docs.wendoshop.com/en/introduccion/): Scope, per-store model, and base server.
- [Quickstart](https://docs.wendoshop.com/en/inicio-rapido/): First authenticated read-only request.
- [Authentication](https://docs.wendoshop.com/en/autenticacion/): Secure issuance, use, rotation, and revocation of store API keys.

## Concepts

- [Scopes and permissions](https://docs.wendoshop.com/en/scopes-permisos/): Permissions required by each operation.
- [Plans and API tiers](https://docs.wendoshop.com/en/planes-niveles-api/): Tiers declared in x-api-tier.
- [Pagination](https://docs.wendoshop.com/en/paginacion/): Limit and offset parameters.
- [Rate limits](https://docs.wendoshop.com/en/rate-limits/): Control responses and headers.
- [Errors](https://docs.wendoshop.com/en/errores/): Documented formats and status codes.
- [Idempotency](https://docs.wendoshop.com/en/idempotencia/): Idempotency-Key for the API and webhook delivery deduplication.
- [Webhooks](https://docs.wendoshop.com/en/webhooks/): Creation, HMAC signatures, general payload, retries, and duplicates.

## Reference

- [API reference](https://docs.wendoshop.com/en/referencia-api/): Interactive, read-only view of the contract.
- [Full AI documentation](https://docs.wendoshop.com/en/llms-full.txt): All guides combined as Markdown.
- [Changelog](https://docs.wendoshop.com/en/changelog/): Dynamic public history for integrators.

## MCP

- [MCP introduction and connection](https://docs.wendoshop.com/en/mcp/): OAuth connection, permissions, security, and remote server management.
- [MCP tools](https://docs.wendoshop.com/en/mcp/herramientas/): Live catalog with filters, scopes, schemas, and security annotations.

## Sources of truth

- [Remote OpenAPI contract](https://app.wendoshop.com/api/openapi): canonical, current definition of operations, parameters, schemas, responses, and `x-*` extensions.
- [Remote MCP catalog](https://mcp.wendoshop.com/api/mcp/documentation): current service, OAuth discovery, scopes, profiles, tools, schemas, and annotations.
- [Remote public changelog](https://app.wendoshop.com/api/changelog): current history of changes visible to integrators.
- [Sitemap](https://docs.wendoshop.com/sitemap-index.xml): inventory of public pages.

## Instructions for assistants

1. Start with this index and the linked guides.
2. Query the remote OpenAPI contract for current operation, scope, tier, tag, parameter, and schema inventories.
3. Query the changelog endpoint before describing current changes, deprecations, or removal dates; do not use a static copy.
4. Before assuming MCP tool names, parameters, scopes, or availability, query the current remote catalog.
5. Confirm HTTP operations against OpenAPI and do not invent prices, limits, or behavior that is not published.
6. Treat every credential as a secret associated with one store.