VTEX is a global enterprise digital commerce platform, founded in Brazil, serving thousands of merchants across 38 countries. On the APIs.io network VTEX publishes an api_count of 44 OpenAPI-described APIs — one of the deepest single-provider commerce surfaces in the catalog. This is not a checkout widget. It is a full composable-commerce operating system exposed as APIs.
What’s in the surface
The 44 specs span every plane of running a store. The core transactional set covers the VTEX Catalog API, VTEX Checkout API, VTEX Orders API, VTEX Pricing API, and VTEX Payments Gateway API. Around that sit the operational APIs: VTEX Logistics API, VTEX Shipping Network API, VTEX Tracking API, VTEX Subscriptions API, and VTEX Promotions and Taxes API. Identity and data are handled by the VTEX ID API, VTEX License Manager API, VTEX Master Data API, and VTEX Session Manager API. Discovery gets its own stack — VTEX Intelligent Search API plus VTEX Intelligent Search Events API.
What’s interesting
Two things stand out.
First, VTEX ships protocols, not just endpoints. A large share of the surface defines integration contracts that third parties implement: the VTEX Payment Provider Protocol API, VTEX Gift Card Provider Protocol API, VTEX Pricing Hub API, VTEX Anti-Fraud Provider API, and the family of VTEX Marketplace Protocol APIs for external orders, fulfillment, and sellers. That is a platform designed to be extended from the outside in.
Second, privacy is a first-class architectural seam. VTEX publishes PII-aware variants — the VTEX Orders API - PII Data Architecture and the VTEX Profile System API - PII Data Architecture — alongside a dedicated VTEX Data Subject Rights API for GDPR and LGPD requests. Compliance is modeled into the API surface rather than bolted on.
The agentic layer is where this gets forward-looking. VTEX carries an agentic access profile summarizing 692 operations, of which 386 are marked as acting and 22 require a human in the loop. For anyone wiring agents into commerce, that acting-versus-human split is the map of where autonomous execution is safe and where a person still has to sign off.
Beyond the specs, VTEX rounds out the profile with governance artifacts on the network: Spectral rules, a vocabulary, a JSON-LD context, and Authentication, Domain Security, and Vulnerability Disclosure records.
Takeaway
VTEX is a case study in what “API-first commerce” means at enterprise scale — catalog, checkout, orders, logistics, payments, search, and marketplace each carved into their own governed contract, with protocols for partners and PII handling built into the design. Browse the full surface at apis.io/providers/vtex/ and start with the plane your integration actually touches.