Skip to main content
GET
List a site's embeddable widgets

Authorizations

X-Sorraia-Site-Key
string
header
required

A per-site key (sor_site_...), shown on the site's Embed card in the dashboard (Site → Embed) and regenerable there. It authorises three operations for the single site it belongs to — GET /site-catalog, GET /site-verification and POST /site-verification/attempt — and nothing else. It is NOT an API key: it carries no scopes, reads no customer data, and Authorization: Bearer will not accept it.

It is not purely read-only: the attempt endpoint can mark the site's domain verified. It does so only by asking Sorraia to fetch the site's verification token back from the registered hostname — the key proves account access, never hostname control, so it cannot claim a domain it cannot serve the token from.

Response

The site and its embeddable widgets.

site
object
required
widgets
object[]
required

Every non-archived embeddable widget on the site, ordered by type (form, calendar, shop, chat, whatsapp) then name. Not paginated.