# NextCommerce API & scoped permissions

## Scopes OAuth (least privilege)

| Scope | Descripción |
| --- | --- |
| `contact:write` | Enviar consultas comerciales vía API de contacto |
| `catalog:read` | Leer catálogo de productos (sandbox/plataforma) |
| `orders:read` | Leer órdenes (sandbox/plataforma) |
| `orders:write` | Crear/actualizar órdenes (sandbox/plataforma) |
| `stock:read` | Leer stock |
| `stock:write` | Actualizar stock |
| `customers:read` | Leer clientes |
| `webhooks:manage` | Gestionar webhooks |

Pedí solo el scope mínimo para la tarea. Metadata máquina: [RFC 9728](https://www.nextcommerce.com.ar/.well-known/oauth-protected-resource) y [OpenAPI](https://www.nextcommerce.com.ar/openapi.json).

## Auth

Bearer token en header `Authorization`. Obtené tokens de sandbox en [Sandbox](https://www.nextcommerce.com.ar/developers/sandbox).

---

## Recursos para agentes

- [llms.txt](https://www.nextcommerce.com.ar/llms.txt)
- [Sitemap](https://www.nextcommerce.com.ar/sitemap.xml)
- [Developers](https://www.nextcommerce.com.ar/developers)
- [OpenAPI](https://www.nextcommerce.com.ar/openapi.json)
- [OAuth protected resource metadata](https://www.nextcommerce.com.ar/.well-known/oauth-protected-resource)
- [Contacto](https://www.nextcommerce.com.ar/contact)