POST /api/exposure/order-status) with delivery status, tracking URL and payment status. You keep a hosted storefront for
$10 USD per year and still connect it to your ERP, warehouse, courier or payment system. The custom domain required for
Expose API is unlocked by Tier-2 at $18 USD/year or the add-on at $8 USD/year; you register the domain itself separately at any registrar.
The problem: hosted stores that lock your orders inside
Hosted store builders are fast to start but often hard to connect. Small brands end up exporting CSV files, retyping orders into a warehouse tool or paying for middleware just to get an order from the storefront to the system that actually fulfils it. Self-hosted platforms like WooCommerce give you full access, but you pay with hosting, updates, plugin conflicts and security patching. Shop-E-Business sits in the middle: the store is hosted and maintained for you, and the order stream is yours.
What Expose API gives you
- Outbound order dispatch. After an order is saved, Shop-E-Business POSTs it to your API Endpoint with a fresh
CustomOrderId, line items, totals and billing details (including optional buyer email). - Buyer redirect. Checkout and Order Now send the buyer to your Redirect URL, for example your own payment or thank-you page.
- Inbound status callback. Your system posts
DeliveryStatus,DeliveryTrackingUrlandPaymentStatusfor aCustomOrderId; every line of that order is updated. - Courier config endpoint.
GET /api/exposure/courier-configreturns your ship-from address and parcel defaults to an authenticated integration. - Custom Order Management. A dedicated admin page lists API orders with images, billing details, delivery and payment status, tracking link and Shop-E-Business tracking ID, with manual status override.
- Buyer tracking. The public tracking page shows the delivery status, payment status and clickable tracking URL you reported.
Security model
Each shop has a server-generated secret (48 random bytes) that is shown only in the admin credentials panel and can be regenerated at any time.
Outbound requests carry Authorization: Bearer with an HS256 JWT where iss = shopebusiness, aud = seller-{shopId},
and the token expires after five minutes. Callbacks are the mirror image: iss = seller-{shopId}, aud = shopebusiness, and the
CustomOrderId claim must equal the body. Endpoint and redirect URLs must be absolute public http(s) addresses, and localhost or loopback targets are rejected.
Reliability without coupling
Your server never blocks a sale. Dispatch happens only after the order is committed and uses a 10-second timeout without following redirects; non-2xx responses and timeouts are logged and the order stays in your dashboard.
How it compares
| Shop-E-Business | Shopify | WooCommerce | Wix | |
|---|---|---|---|---|
| Order webhooks | Built in, JWT-signed | Yes (app/admin setup) | Yes (self-hosted) | Via Velo / automations |
| Status callback to storefront | Delivery, tracking URL, payment | Fulfillment API | REST API | API on higher plans |
| Buyer redirect after checkout | Configurable URL | Limited | Plugins / code | Limited |
| Hosting and maintenance | Included | Included | You maintain | Included |
| Yearly cost | $10 (+$18 USD or $8 USD to connect the domain you own that the API requires) | Monthly plan | Hosting + plugins | Monthly plan |
Typical integrations
- Send orders to a warehouse or ERP and post back "Packed", "Shipped" and the courier tracking link.
- Take payment on your own page through the redirect, then report
PaymentStatus. - Use the ready-made Stripe + EasyPost Cloudflare Worker, which is built on the same API.
- Push orders into Google Sheets, Slack or a CRM through a small serverless function.
How to turn it on
- Unlock the custom domain feature (Tier-2 subscription or add-on key) and save a domain you own (registered separately at any registrar).
- Open Advance → Expose API, enter your API Endpoint and Redirect URL, and save to generate your secret.
- Verify the JWT on your server using the C# or Node.js sample, return 2xx, and call the status endpoint when the order progresses.
- Activate, place a test order and watch it appear in Custom Order Management.
Frequently asked questions
Does Shop-E-Business have an order API or webhooks?
Yes. With Expose API, every new order on your store is POSTed as JSON to your own HTTPS endpoint, signed with an HS256 JWT. Your server can post delivery status, a tracking URL and payment status back to /api/exposure/order-status.
How are order webhooks secured?
Each request carries a JWT signed with your shop's secret: issuer shopebusiness, audience seller-{shopId}, a CustomOrderId claim and a 5-minute expiry. Callbacks must be signed by your shop (issuer seller-{shopId}, audience shopebusiness) and the CustomOrderId claim must match the body.
What happens to my buyer after checkout when the API is active?
Shop-E-Business redirects the buyer to the Redirect URL you configure, for example your own payment or confirmation page, and later shows the delivery and payment status you report on the buyer's tracking page.
Will a slow or offline server break my checkout?
No. Dispatch runs after the order is saved, with a 10-second timeout. Failures are logged and the order is still placed and visible in your dashboard.
Who can use API exposure?
Shops with an active subscription and the custom domain feature (Tier-2 at $18 USD/year or the custom-domain add-on at $8 USD/year) and a saved custom domain you have registered yourself at any registrar. Both URLs must be public HTTPS addresses.
Is there sample code?
Yes. The Expose API tab shows the request schema, a sample JSON payload, response codes and signing and verification samples in C# and Node.js.
Start your Shop-E-Business store today
3-day free trial, no credit card. Then $10 USD per year — 0% transaction fees.