Get the store profile
Returns the store’s public business profile: support contact details, business and returns addresses, legal identity, social profiles, the list of published legal documents, and the store-level custom entries the merchant has made public.
Everything in the response is intended for display on a storefront, so a publishable key may
read it. Draft documents and private custom entries are never included. Contact email and
phone fall back to the store’s own contact details when the merchant has not set dedicated
support ones.
Responses are cached for up to five minutes and carry an ETag; send it back as
If-None-Match to receive 304 Not Modified when nothing has changed. Subscribe to the
store.profile_updated webhook event to learn when the profile changes.
Authorizations
API Key Authentication
Use your API key in the Authorization header:
Key Types:
Secret Keys (Server-Side Only):
- Format:
tybrite_sk_live_*(production) ortybrite_sk_test_*(sandbox) - Full read/write access to all endpoints
- ⚠️ NEVER expose in client-side code or public repositories
- Required for: write operations, authentication, payment verification, AI recommendations
Publishable Keys (Client-Safe):
- Format:
tybrite_pk_live_*(production) ortybrite_pk_test_*(sandbox) - Read-only access (GET requests only, plus POST semantic search)
- ✅ Safe for client-side JavaScript, mobile apps, and public code
- Allowed for: browsing products, search, CMS content, pricing queries
Endpoint-Specific Requirements:
- Authentication endpoints (
/v1/auth/*): Secret key required - Payment verification (
POST /v1/payments/verify): Secret key required - AI Recommendations (
POST /v1/recommendations): Secret key required - Semantic Search (
POST /v1/search): Both key types allowed (read-only operation) - All write operations: Secret key required
- All read operations: Both key types allowed
Using a publishable key for restricted operations returns 403 Forbidden.
Response
The store profile
The store's public business profile: how shoppers reach it, where it trades from, its legal identity, its social profiles, the legal documents it has published, and the custom entries the merchant has made public. Everything here is intended for display on a storefront.

