Skip to main content
PUT
Replace the browser origins your storefront may read this brand from

Authorizations

Authorization
string
header
required

Per-client API key (M2M). Presented as Authorization: Bearer <key>.

Headers

X-Brand-Id
string
required

Opaque brand id (brd_...). Validated to belong to the resolved client (§2).

Pattern: ^brd_[A-Za-z0-9][A-Za-z0-9_-]*$

Path Parameters

brand_id
string
required

the brand whose custom domains to view or manage (must match X-Brand-Id).

Pattern: ^brd_[A-Za-z0-9][A-Za-z0-9_-]*$

Body

application/json
browser_origins
string[]
required

the complete list of exact origins to allow. An empty array clears the list and stops all browser reads of this brand.

Response

the stored list, plus any entries that were refused and why

data
object
required