NOZLOO agent developer guide

This service exposes public, read-only product data. It requires no API key, bearer token, OAuth flow, or user account. It never exposes customer, order, checkout, payment, or Shopify Admin data.

Start here

• OpenAPI 3.1 contract
• GET https://nozloo-agent-api.vercel.app/api/catalog/products?limit=20&page=1
• GET https://nozloo-agent-api.vercel.app/api/catalog/products/{handle}

Errors

API failures use a stable JSON envelope with code, message, and resolution. For example, an unknown product returns HTTP 404 and PRODUCT_NOT_FOUND.

{"error":{"code":"PRODUCT_NOT_FOUND","message":"No public NOZLOO product exists for this handle.","resolution":"List products first and retry with a returned handle."}}

Authentication boundary

The public catalog above is anonymous. NOZLOO's separate Shopify customer-account surfaces use Shopify OAuth. Agents that need customer-account access must discover the live configuration from the protected-resource metadata, authorization-server metadata, and customer-account discovery. Those scopes do not apply to this public catalog API.

Commerce

For cart and checkout operations, use NOZLOO's Shopify UCP discovery at https://nozloo.com/.well-known/ucp. Payment still requires buyer approval.