POST
cURL

Authorizations

X-Agent-Key
string
header
required

Service-account key, format sq_agt_*. Carries least-privilege scopes.

Headers

Idempotency-Key
string
required

Unique per logical operation; identical key+body returns the cached response, different body → 409.

Maximum string length: 200
X-Store-ID
string

Target store; required when the key is bound to multiple stores.

Body

application/json
title
string
required
price
number
required
Example:

29.99

product_id
string
project_id
string
description
string
images
string<uri>[]
variants
object[]

Response

OK