Creating an App in Commerce7

Adding a custom app or integration to your Commerce7 store

First things first

Commerce7's Open APIs and webhooks - Whether you’re connecting Commerce7 to a vendor you already use or building custom reporting or functionality, our open APIs and webhooks give your team the flexibility to make it happen.

Developer knowledge needed - You’ll need a developer to build it (either on your team or through one of our partner developers). 

Principle of Least Privilege (PoLP) - To protect your store's security, we follow the Principle of Least Privilege (PoLP). This means your developer's app is only granted the minimum access it needs to do its job, reducing the risk of unauthorized actions and keeping your data safe. It's one of the key reasons we require developers to build apps rather than simply adding users to your account.

Monthly Fee - Developers are charged $39 per month for each app.

What to expect

Overview of steps

1. Review Commerce7's Developer Documentation: Before you begin, review our Developer Documentation, to understand how Commerce7 apps work, available APIs, and app requirements.

2. Notify Commerce7: Before development begins, your developer must notify Commerce7 and explain what the app is designed to do. That applies whether the app is public, private, or created specifically for your store.

   1. Your developer can find the required details in Tell Us Your Plan. This lets us determine if the app will meet our requirements before you begin building anything. We’ll give you a green light for development or come back with questions or concerns.
3. Request a sandbox environment: To develop and test a Commerce7 app, you must have access to a sandbox environment. Submit a sandbox request with this form and our team will help you get set up with a testing tenant where you can safely build and validate your integration. Note: Apps can no longer be tested in production environments.
4. Begin building your app: Refer to the Developer Documentation to build your app.
   1. Once your sandbox environment has been provisioned:
   2. Create your app in the Developer Center
   3. Generate your API credentials
   4. Follow the developer documentation to build your solution
   5. Please select 'Private' as the app type when you are first building. If you want to list your app on the public marketplace (optional), Beta testing as a Private app is a required step.
5. Develop and test your app in the sandbox: Before submitting your app for review, thoroughly test it in your sandbox environment. Thoroughly test the following:
   1. Authentication and API connectivity
   2. Data synchronization and updates
   3. Error handling and edge cases
   4. User workflows and expected outcomes
      
      
6. Confirm your app is ready for review: Prior to submitting confirm that you've done the following:
   
   1. Development is complete
   2. Testing has been completed in at least one sandbox or partner tenant
   3. Any known issues have been resolved

   4. You can clearly describe your app's purpose and functionality

7. Submit your app: When your app is fully developed and tested, submit it through the Developer Center for review. Include the following:
   1. App name and description
   2. Installation steps
   3. Screenshots
   4. API, webhook, and MCP scopes. Please only select the scopes that your app is actually using today in this version. You can request additional scope in future versions, so do not request scope your app is not actually using.
8. Complete the security review questionnaire: Upon submission, we’ll send you a link to our security questionnaire. This review helps ensure the app meets Commerce7 security and data protection requirements.
9. App review and approval: Our team will review the following:
   1. Security requirements
   2. Technical implementation
   3. Platform compatibility
   4. API, webhook, and MCP scope
   5. Overall readiness for production use
   6. If any issues are identified, we'll provide feedback and request updates before approval.
10. Deploy your app: Once approved, your app can be installed and used on production tenants.

FAQ

Why do I have to pay a fee to create an app?
The monthly app fee helps support the infrastructure, resources, and security measures required to maintain a healthy and reliable app ecosystem within Commerce7.

Our API supports millions of requests, and that level of usage comes with ongoing infrastructure and operational costs. Additionally, as security threats become increasingly sophisticated, we're taking a more proactive approach to protecting our platform and the data entrusted to us. This means implementing additional safeguards, conducting security reviews, and dedicating time and resources to evaluating and monitoring third-party applications.

The monthly fee helps offset some of these ongoing costs and supports the additional work involved in reviewing and maintaining app integrations. It also helps ensure that developers are serious about the applications they're building and committed to supporting them over time.

Ultimately, our goal is to continue providing an open and flexible platform for innovation while maintaining the performance, security, and reliability that all Commerce7 clients depend on.

Why do I have to fill out the security questionnaire?
The security questionnaire is an important part of our app review process. We want to ensure that any third-party app or integration meets the appropriate security standards before it is connected to our platform.

This process helps us understand how the application handles, stores, and protects data, identify potential security risks, and ensure that the right safeguards are in place. Ultimately, it's about protecting everyone's data--not just your information, but also your customers' data and the broader security of the Commerce7 platform.

We understand that completing a questionnaire takes time, but it's an important step in helping us maintain a secure and trusted environment for all Commerce7 clients and their customers.