Import Products
POST/api/v2/products/import
Imports run as a tracked job — a bulk import can exceed a ~100s edge-proxy limit (Cloudflare 524), so the rows are processed off the request cycle. Returns a tracked_job_log_id; progress and the created/updated/failed counts surface via the tracked job log endpoints.
products:writeGrant this scope to your token under Settings → Developer → Personal Access Tokens.
Rows may include product_type — the product type's full path (e.g. Diapering > Cloth diapers), or just its leaf name when that name is unique among leaf types. A value that matches no type fails the row's validation. The import template includes this column.
Upsert by SKU: a row without a product id / existing_product_id updates the existing product with the same SKU (matched case-insensitively, keeping the stored spelling) instead of failing on the duplicate SKU; rows with a new SKU create products.
Product type on update: send _type_provided: true (as returned by Validate Import when the file maps a Type column) to change an existing product's type; without it an update keeps the product's current type, so a file with no Type column never turns a bundle or kit back into a standard product.
Components: component_skus / component_ids / component_of_sku / component_of_id use SKU->QTY, SKU2->QTY2; quantities may be decimals (default 1) and SKUs match case-insensitively. Linking replaces the product's whole component list.
Request
Responses
- 202
- 401
- 403
- 422
- 429
Accepted
Response Headers
Unauthenticated — the bearer token is missing, revoked, expired, or malformed. Never retry automatically; fix the credential. See the Errors guide.
Forbidden — the token lacks a required scope, the endpoint is not available to API tokens, or the user behind the token lacks the permission. A human must adjust the token scopes or user permissions; do not retry.
Validation failed — the body is a field → messages map (Laravel shape) or the platform envelope with a stable machine-readable code. Fix the payload and resubmit.
Rate limited — platform limit is 1,000 requests/min; individual tokens may carry lower limits. Honor the Retry-After header before retrying. See the Rate Limits guide.