# Features
567 operations across eight domains. This page is the map; each card lands in the
reference tab that documents it exhaustively.
## Sell things
**121 endpoints.** Products, variants, options, collections, categories, bundles,
tags and metafields. Digital products sit here too: files, license keys and
subscriptions.
**43 endpoints.** Stock levels, locations, reservations, transfers, low-stock
thresholds and back-in-stock alerts.
## Take money
**75 endpoints.** Payments across three providers, refunds, gift cards and their
denominations, store credit, loyalty, currencies and tax.
**69 endpoints.** Orders, draft orders, edits, fulfilments, returns, exchanges and
claims.
## Know your customers
**77 endpoints.** Customers, groups, addresses, companies and their contacts,
wishlists, reviews and product questions.
**100 endpoints.** Campaigns, flows, forms, templates, contacts, segments,
preferences and newsletters.
## Build the storefront
**57 endpoints.** Templates, sections, themes, navigation, pages, blogs, redirects
and SEO. Editable as files with the CLI, or conversationally over MCP.
**25 endpoints.** API keys, webhooks, staff, roles, settings, regions and store
policies.
## Three ways in, one grant
Every feature above is reachable three ways, governed by the same secret key and the
same scopes.
Call it from anything that speaks HTTP.
An AI client reads and writes the store directly.
The storefront as files on your machine.
Scopes are granted per key, and irreversible operations sit behind a separate tier
ending in `:delete`. A key holding every ordinary write scope still cannot cancel a
campaign send or an invoice. See [Scopes](/authentication/scopes).