Connected sources

GET/v1/shops/{id}/shopify/drafts

The draft orders in the shop's Shopify from the last 90 days.

What it does

Read live from Shopify, as the Sources page does. At most 120 reads an hour per person.

Who may call it

A key whose maker's role holds figures (see the figures), after the fence, for the shop or category it names.

Request

HTTP

GET https://panlytics.net/api/v1/shops/{id}/shopify/drafts

Parameters

Name	In	Type	Required	What it is
`id`	path	integer	Yes	The shop's id.
`Authorization`	header	string	Yes	Bearer, a space, then the key.

Example request

curl https://panlytics.net/api/v1/shops/12/shopify/drafts \
  -H "Authorization: Bearer $PANLYTICS_KEY"

import os

import requests

response = requests.get(
    "https://panlytics.net/api/v1/shops/12/shopify/drafts",
    headers={"Authorization": f"Bearer {os.environ['PANLYTICS_KEY']}"},
    timeout=60,
)
response.raise_for_status()
print(response.json())

const response = await fetch("https://panlytics.net/api/v1/shops/12/shopify/drafts", {
  headers: {
    Authorization: `Bearer ${process.env.PANLYTICS_KEY}`,
  },
});
if (!response.ok) throw new Error(`Panlytics answered ${response.status}`);
console.log(await response.json());

Response

200: The answer, as JSON.

Field	Type	Always there	What it is
`data[]`	object[]	Yes	The draft orders of the last 90 days.
`data[].name`	string	Yes	The draft's name.
`data[].createdAt`	string (ISO 8601)	Yes	When it was made.
`data[].items`	integer	Yes	Pieces in it.
`data[].subtotal`	number	Yes	Its subtotal.
`data[].status`	string	Yes	Shopify's status for it.
`currency`	string	Yes	The shop's currency.
`capped`	boolean	Yes	True when there were more than could be read, so these are the newest only.
`windowDays`	integer	Yes	Always 90.

Example response

200

{
  "data": [
    {
      "name": "Draft 12",
      "createdAt": "2026-10-20T08:00:00.000Z",
      "items": 3,
      "subtotal": 12.5,
      "status": "open"
    }
  ],
  "currency": "EUR",
  "capped": false,
  "windowDays": 90
}

Errors

A refusal is JSON with a code, a sentence in error, and a requestId when the fault is ours. Read the code, not the sentence. Every code is listed on Errors.

Status	Code	When	What to do
400	`api.invalid`	A path id, a query parameter, a header or a body field is missing or not valid. `detail` names the field.	Read that endpoint in the API reference, correct the field and call again.
401	`api.key_missing`	The call had no Authorization header.	Send the key in the Authorization header as Bearer, then call again.
401	`api.key_refused`	The key is wrong, revoked, past its end, or its maker or company no longer allows it (developer mode off, the maker removed or switched off, or the maker's role lost the developer ability).	Ask the person who gave you the key to make a new one.
401	`api.wrong_key_kind`	This key does not open these endpoints.	Use the key these endpoints were made for, or ask the person who gave you the key.
403	`refused`	The key's maker may not do this here: their role lacks the ability, or the shop or category is outside their reach.	Ask the CEO for a role that allows it, or call it for a shop or category the role reaches.
403	`auth.not_fresh`	This step needs you to prove it is you.	Confirm your password or passkey, then try again.
404	`not_found.said`	Nothing with that id in the key's company. An id of another company answers the same.	Check the id. List the shop or category it belongs to and take the id from there.
409	`source.none`	No source is connected to this shop.	Connect one from Sources, then try again.
429	`api.rate_limited`	The key made more than 120 calls in this minute. Wait the seconds in Retry-After.	Wait the seconds in Retry-After, then call again.
429	`source.busy`	That is a lot of reads from this source in one hour.	Give it a few minutes and press again.
500	`server`	Something failed on our side. The answer carries a requestId to quote.	Try again in a minute; if it keeps happening, report it.
502	`source.unreachable`	That source is not answering.	Try again in a few minutes; the source may be down.
503	`developer.unavailable`	API keys are not set up on this deployment yet.	Report it, and we will switch them on.