storefront-gen-backend

dev console · localhost:3100

Get this from your browser while the MC custom app is open: open DevTools → Network → any request to mc-api.europe-west1.gcp.commercetools.com → copy the Authorization: Bearer … header value (without the Bearer prefix). Tokens are valid for 60 s; refresh the page and grab a fresh one if auth fails.

1 · Auth ping GET /api/spike/ping

Verifies the JWT against MC's JWKS and returns the shadow-user identity. Requires MC_JWKS_URL + MC_ISSUER in your root .env.

2 · SSE stream GET /api/spike/sse

Streams 30 ping events, 1 s apart. No auth required. Confirms the direct cross-origin SSE transport works (design decision 7).

— no events yet —

3 · Brand brief expand POST /api/brand-brief/expand

Give a one-sentence brand vibe. Claude expands it into a structured brand brief (colours, fonts, tone, business context). Requires auth + AI API credentials (Vercel AI Gateway or ANTHROPIC_API_KEY).

storefront-gen-backend dev console · not deployed to production