# API reference (/api)

All requests go to `https://api.comecero.com/api/v1` over HTTPS, with a token in the `Authorization` header:

```bash title="Request"
curl https://api.comecero.com/api/v1/products \
  -H "Authorization: Bearer $COMECERO_TOKEN"
```

- **Test or live** is set by the token. A test token only sees test data.
- **Tokens**: secret (your server), trusted and limited (the browser). See [Authentication](/docs/basic-concepts/authentication).
- **Errors** come back as JSON with a `type`, a `message` and a short `reference` code. See [Error handling](/docs/basic-concepts/error-handling).
- **Lists** are paged. See [Lists and pagination](/docs/basic-concepts/lists-and-pagination).
- **Webhooks** are listed on the [Webhooks](/api/webhooks) page, with how to check each delivery's signature.

The whole API is also one file you can import into Postman, Insomnia or a code generator: [openapi.json](/openapi.json).