To ensure secure access to merchant data, fabric requires authentication for all API requests. API apps generate API keys that validate permissions and define access rights, authorizing interactions between external applications and fabric services. There are two types of API apps:

  • System Apps: Used for system-to-system authentication without requiring user credentials.

  • User Apps: Used to authenticate end users through fabric Identity.

For more details on authentication and app types, see the API Apps documentation.

Merchants can set up webhooks for real-time notifications on product updates, category changes, and collection assignments. These automated alerts enable seamless synchronization between fabric and external systems such as CMS platforms, third-party marketplaces, or ERP systems. Webhooks must be explicitly enabled and require an HTTP endpoint to receive event data. For details on configuring webhooks, see Webhooks.