Settings

Headless

Configure allowed origins and manage API tokens for your headless API integration, so a custom storefront can access your shop data, from the Headless settings tab.

The Headless tab is for developers who want to build a custom storefront on top of Orderain instead of using the built-in one. Open Settings from the dashboard sidebar and select the Headless tab. It's where you configure allowed origins for your headless API integration.

Headless mode is aimed at developers — it lets you power your own frontend with Orderain's store data through its API. If you're using the standard Orderain storefront, you don't need to change anything here.

Allowed Origins

Add up to 3 allowed origins for your shop. These origins are the only ones allowed to make API requests to your shop.

Enter an origin (for example https://example.com) and click Add. A counter shows how many you've added (for example 1/3 origins added).
Remove an origin with the × next to it.
Click Save Origins to apply your changes.

API Tokens

Create and manage API tokens to access your shop data programmatically. Click + Create New Token to generate a new token. The View Documentation link opens the full API reference.

Each token in the list shows:

Name and a status badge — Active or Revoked.
Expires. The token's expiry date and time.
Scopes. The permissions granted, such as headless_api, read_access, write_access, or delete_access.
Origins. The origin the token is tied to.

Click Revoke on an active token to disable it immediately. Revoked tokens stay listed for reference but can no longer be used.

Treat API tokens like passwords — anyone with a valid token and an allowed origin can access your shop data within the token's scopes. Revoke any token that is no longer needed or may have been exposed.

API documentation

For endpoints, authentication, and code samples, see the full Orderain Headless API documentation. The reference covers regions, product categories, products, inventory, shipping, taxes, cart, customers, orders, shop tags, and shop warehouse, and includes client libraries for Shell, Ruby, Node.js, PHP, and Python.

API requests are authenticated with a Bearer Token (one of your API tokens) and must come from an allowed origin. Set both up above before making requests.

Shipping Rate

Set up shipping zones and rules so customers are charged the right delivery cost at checkout, from the Shipping Rate settings tab.