Register independently as an Individual Developer or Software House with zero store requirements. Access scoped Bearer API keys, cryptographically signed HMAC webhooks, and publish to the UnExplores App Store.
Full programmatic access to products, orders, customers, and inventory. Ideal for custom mobile apps, POS hardware, and ERP synchronization.
Receive instantaneous push events for order.created, order.paid, and order.fulfilled signed with HMAC-SHA256 headers.
Publish custom payment gateways, logistics bridges, or storefront themes to thousands of active storekeepers and monetize your software.
Authentication is handled via Bearer tokens passed in the Authorization header. Never expose your Secret Key (sk_live_...) in client-side code.
curl -X GET "https://stores.unexplores.com/api/portal.php?action=get_products" \
-H "Authorization: Bearer sk_live_your_secret_key_here" \
-H "Content-Type: application/json"/api/portal.php?action=get_products
Fetch active products for the authenticated store, including pricing, barcode, inventory count, and media.
{
"success": true,
"products": [
{
"id": 101,
"title": "Classic Cotton Oxford Shirt",
"sku": "SKU-SHIRT-01",
"price_pkr": 2499,
"stock_quantity": 45,
"barcode": "896400012345"
}
]
}/api/portal.php?action=create_order
Create an order programmatically, trigger inventory allocation, and dispatch webhooks.
curl -X POST "https://stores.unexplores.com/api/portal.php?action=create_order" \
-H "Authorization: Bearer sk_live_..." \
-H "Content-Type: application/json" \
-d '{
"customer_name": "Tariq Mahmood",
"customer_phone": "+923001234567",
"customer_email": "tariq@gmail.com",
"shipping_address": "House 14, Street 2, F-8/2, Islamabad",
"city": "Islamabad",
"items": [{"product_id": 101, "quantity": 1, "unit_price": 2499}],
"payment_method": "jazzcash"
}'Every webhook payload includes an X-Store-Signature header. Validate the payload using your webhook secret key before processing in production.
<?php
$payload = file_get_contents('php://input');
$signatureHeader = $_SERVER['HTTP_X_STORE_SIGNATURE'] ?? '';
$secretKey = 'whsec_your_registered_secret';
$computed = hash_hmac('sha256', $payload, $secretKey);
if (!hash_equals('sha256=' . $computed, $signatureHeader)) {
http_response_code(401);
die('Invalid HMAC signature');
}
$event = json_decode($payload, true);
// Process order.paid, order.fulfilled, or inventory.low securely!
http_response_code(200);
echo json_encode(['received' => true]);Develop payment gateways, automated courier shipping plugins, or themes. Distribute for free or charge monthly subscriptions with automated revenue splits.