API Release news from April 17, 2026

17. 4. 2026

Here’s what’s new in API that’s been in production since April 17, 2026!

Breaking Changes:

512-variant limit enforced on product create and update endpoints

The maximum number of variants per product will be enforced at 512 on the API level, matching the existing admin limit. This change will take effect on April 30, 2026. Previously this guard existed only in the admin UI and could be bypassed via the API.

Affected endpoints:

POST /api/products — returns 422 if the request would result in more than 512 variants
PATCH /api/products/{guid} — returns 422 if the combined count of existing and new variants would exceed 512

Partners creating or updating products with a large number of variants should verify their payloads stay within this limit before the change takes effect.

Upcoming credit notes & orders upcoming validation changes

Reminder: All changes to validations for orders and credit notes in API will be released by May 4th, 2026. More info in the previous release news.

New location of reviews endpoints

Reminder: the old /eshop/reviews location will be deleted by May 4th, 2026. All reviews endpoints (GET, POST, PATCH) are now available under /reviews. More info in the previous release news.

Mandatory field countryCode in orders

Reminder: the field countryCode will become mandatory in the POST and PATCH order endpoints. Please make sure your integration includes this field to avoid validation errors. More info in the previous release news.

Improvements:

Webhook Failure Rate Email Notifications

Starting from April 20th, partners will receive periodic email reports listing webhooks whose fail ratio over the last 7 days exceeds 50%. This works similarly to the existing rate limiter email report.
If you receive this notification, please take action: either fix the issue causing your webhook to fail, or unregister the webhook if it is no longer needed.
Automatic unregistration of failing webhooks is not active yet — the report is informational only for now. However, we plan to add automatic unregistration in the near future!

Security Fix: SSL Certificate Verification for Product Image Downloads

SSL certificate verification has been re-enabled for product image downloads from external URLs provided via the API.
What this means for you: If your integration supplies product image URLs pointing to servers with invalid or self-signed SSL certificates, those image downloads will now fail. Make sure all image URLs are served from hosts with valid SSL certificates.
No changes to the API interface are required.

New features:

New SDK Version v0.4.0

The official Shoptet API SDK has been updated to version 0.4.0 – see all changes here.

Request ID in all API responses

All API responses now include a requestId field inside a metadata object. The value is also available as a response header.
This identifier makes it significantly easier to trace requests when reporting issues to our API support. We recommend logging it on your side.

Supplier Webhooks

Three new webhook events are now available:supplier:create, supplier:update, supplier:delete. See all webhook event types here.

Updated Product Flag Management

A new flagsManagement parameter has been added to the product PATCH endpoint allowing to set or unset individual product flags without replacing the entire flag set. See more information here.

What we plan in the upcoming days:

New features and improvements in progress, e.g.:

Webhooks for availability:create, update and delete
Products BATCH delete

Please note: The plan above is subject to change due to unexpected events or changes in priorities – we do not commit to deliver these outputs and outcomes. Thank you for your understanding.

If you have any API-related questions, feedback or requests, please do not hesitate to contact us on api@shoptet.cz. We would love to hear from you!