# Features 567 operations across eight domains. This page is the map; each card lands in the reference tab that documents it exhaustively. ## Sell things **121 endpoints.** Products, variants, options, collections, categories, bundles, tags and metafields. Digital products sit here too: files, license keys and subscriptions. **43 endpoints.** Stock levels, locations, reservations, transfers, low-stock thresholds and back-in-stock alerts. ## Take money **75 endpoints.** Payments across three providers, refunds, gift cards and their denominations, store credit, loyalty, currencies and tax. **69 endpoints.** Orders, draft orders, edits, fulfilments, returns, exchanges and claims. ## Know your customers **77 endpoints.** Customers, groups, addresses, companies and their contacts, wishlists, reviews and product questions. **100 endpoints.** Campaigns, flows, forms, templates, contacts, segments, preferences and newsletters. ## Build the storefront **57 endpoints.** Templates, sections, themes, navigation, pages, blogs, redirects and SEO. Editable as files with the CLI, or conversationally over MCP. **25 endpoints.** API keys, webhooks, staff, roles, settings, regions and store policies. ## Three ways in, one grant Every feature above is reachable three ways, governed by the same secret key and the same scopes. Call it from anything that speaks HTTP. An AI client reads and writes the store directly. The storefront as files on your machine. Scopes are granted per key, and irreversible operations sit behind a separate tier ending in `:delete`. A key holding every ordinary write scope still cannot cancel a campaign send or an invoice. See [Scopes](/authentication/scopes).