Fixed
Send your access token in the X-Yotpo-Token header
October 25th, 2026
The API reference said to send your access token as Authorization: Bearer. The API doesn't read that header, so those requests failed with 401 "The access token is missing". Send the token in the X-Yotpo-Token header instead. Try It on every reference page now does this.
Other fixes in the reference:
- Every endpoint that needs a token now documents its
401responses:invalid_requestwhen no token was sent,invalid_tokenwhen the token is wrong, revoked or expired. - The store-level webhook subscription endpoints now take
store_idin the path, so Try It and the code samples build the right URL. - Retrieve Orders documents its
limitparameter correctly (1 to 100). - Retrieve Q&A for a product, Retrieve the bottom line for Q&A, Vote on answers, Photos by album and Product images now have full parameters, Try It and example responses.
- Fixed broken links across the guides and reference, including every link to the Yotpo Help Center.
Endpoints affected: all authenticated endpoints; Create, Retrieve, Update and Delete store subscription; Retrieve Orders; the five Q&A and Visual UGC pages above.
