# Catalog

> Products, categories, brands, reviews, lab reports and stock.

Source: https://docs.dashfordevs.com/v1/api-reference/catalog · Topic: Storefront API reference · Updated: 2026-11-07

Generated from the gateway's route table. Base URL `https://papi.dashfordevs.com`. Send your key in `X-API-Key`.

| Method | Path | Key | Status | Notes |
| --- | --- | --- | --- | --- |
| `GET` | `/api/storefront/auth/restock-requests` | Public or secret key | Live (customer data)\* |  |
| `POST` | `/api/storefront/auth/restock-requests/{request_id}/unsubscribe` | Public or secret key | Live (customer data)\* |  |
| `GET` | `/api/storefront/featured-variations` | Public or secret key | Live |  |
| `GET` | `/api/storefront/products` | Public or secret key | Live |  |
| `GET` | `/api/storefront/customer/custom-prices` | Public or secret key | Live (customer data)\* | needs the signed-in customer |
| `GET` | `/api/storefront/reviews` | Public or secret key | Live (customer data)\* | shopper names; reviews held back until the BAA |
| `GET` | `/api/storefront/products/{slug}/core` | Public or secret key | Live |  |
| `GET` | `/api/storefront/products/{slug}/options` | Public or secret key | Live |  |
| `GET, POST` | `/api/storefront/products/{slug}/reviews` | Public or secret key | Live (customer data)\* |  |
| `POST` | `/api/storefront/products/{slug}/notify-restock` | Public or secret key | Live (customer data)\* |  |
| `GET, POST` | `/api/restock/unsubscribe/{token}` | No key | Live (customer data)\* |  |
| `GET` | `/api/storefront/products/{slug}` | Public or secret key | Live |  |
| `GET` | `/api/storefront/seo/product/{slug}` | Public or secret key | Live |  |
| `GET` | `/api/storefront/categories` | Public or secret key | Live |  |
| `GET` | `/api/storefront/categories/{slug}` | Public or secret key | Live |  |
| `GET` | `/api/storefront/brands` | Public or secret key | Live |  |
| `GET` | `/api/storefront/brands/{slug}` | Public or secret key | Live |  |
| `GET` | `/api/storefront/cart-tier-discounts` | Public or secret key | Live |  |
| `GET` | `/api/storefront/promotions` | Public or secret key | Live |  |
| `GET` | `/api/storefront/coa` | Public or secret key | Live |  |
| `GET` | `/api/storefront/coa/{product_slug}/{variation_slug}` | Public or secret key | Live |  |
| `GET` | `/api/storefront/coa/{product_slug}` | Public or secret key | Live |  |

\* **Customer data and payments** routes work for every organization except HIPAA organizations, which get `503 not_available_yet` (with `"available": false`) until that organization's HIPAA path is complete. **Not built yet** routes answer `501 not_implemented`.