Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: Tolstoy Stores API
version: 1.0.0
description: 'The Tolstoy developer API — programmatic access to the AI commerce platform
(AI Studio, AI Player, AI Sales Agent) for developers and AI agents.
Every endpoint requires an authenticated workspace token. Authenticate with
OAuth 2.0 (authorization server https://apilb.gotolstoy.com/mcp/v1, scope
`workspace`), or create a Tolstoy API key in your workspace and exchange it for
an access token at POST /account-service/authenticateCliApiKey with the
`X-CLI-API-Key` header. Send the token as `Authorization: Bearer ` and
include your workspace `appKey` in the request body.
This surface mirrors the official CLI (`@tolstoy-ai/cli` on npm) and the Tolstoy
MCP server (https://apilb.gotolstoy.com/mcp/v1/mcp). Full docs:
https://developers.gotolstoy.com'
contact:
name: Tolstoy Developer Hub
url: https://developers.gotolstoy.com
servers:
- url: https://api.gotolstoy.com
description: Production (Lambda APIs)
- url: https://apilb.gotolstoy.com
description: Production (load-balancer APIs)
security:
- oauth2:
- workspace
- bearerAuth: []
tags:
- name: Stores
description: Stores connected to the authenticated workspace
paths:
/account-service/listStores:
post:
operationId: stores_listStores
summary: List stores and app URLs available to this API key
tags:
- Stores
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
appKey:
type: string
required:
- appKey
additionalProperties: false
responses:
'200':
description: Successful response
content:
application/json:
schema:
type: object
properties:
stores:
type: array
items:
type: object
properties:
appUrl:
type: string
app:
type: string
required:
- appUrl
- app
additionalProperties: false
required:
- stores
additionalProperties: false
'400':
description: Invalid request
'401':
description: Authentication required
security:
- oauth2:
- workspace
- bearerAuth: []
components:
securitySchemes:
oauth2:
type: oauth2
description: Tolstoy's OAuth 2.0 authorization server (also used by the MCP server). Grants workspace-scoped access to the authenticated account.
flows:
authorizationCode:
authorizationUrl: https://apilb.gotolstoy.com/mcp/v1/oauth/authorize
tokenUrl: https://apilb.gotolstoy.com/mcp/v1/oauth/token
refreshUrl: https://apilb.gotolstoy.com/mcp/v1/oauth/token
scopes:
workspace: Full access to the authenticated Tolstoy workspace.
bearerAuth:
type: http
scheme: bearer
bearerFormat: JWT
description: Workspace access token. Obtain one via OAuth 2.0, or create a Tolstoy API key in your workspace and exchange it at POST /account-service/authenticateCliApiKey with the X-CLI-API-Key header. Include your workspace appKey in each request body.
externalDocs:
description: Tolstoy developer documentation
url: https://developers.gotolstoy.com