PPlatformAppStores

Ecwid App Market

Ecommerce

Lightspeed Commerce Inc. · Ecommerce & storefront platforms

Best for: Developers wanting a low-friction API to reach small merchants running lightweight, embeddable Ecwid/Lightspeed storefronts.

Overview

The Ecwid App Market is the developer distribution channel for Ecwid by Lightspeed — an ecommerce platform whose core value proposition is embedding a store into any existing website or selling across channels. Developers build public apps that connect via OAuth 2.0 and can render UI inside the merchant's Ecwid control panel or integrate purely as backend connectors and widgets. The REST API is the primary surface, capped at 600 requests/minute per token, with private single-store apps able to use secret API tokens and public apps required to use OAuth plus webhooks for events.

Getting listed is free but contractual: developers sign a partner agreement and pass a review that typically takes 1–2 business days; apps wiring in unauthorized payment processors, or whose main purpose is advertising, are rejected. On monetization, Ecwid acts as merchant of record through its billing — collecting subscription or usage revenue and paying developers 80% of net app revenue on a quarterly cycle. Choose Ecwid to reach embedded and omnichannel SMB sellers across the Lightspeed ecosystem with a straightforward OAuth + REST model.

How to build & ship

  1. 1Register in the Ecwid (Lightspeed) developer console and create an application
  2. 2Choose the Native app type (recommended for the App Market) over an external app
  3. 3Implement OAuth2 to obtain access tokens and request the scopes your app needs
  4. 4Build the in-admin experience with the Native App JS SDK and integrate store data via the REST API
  5. 5Configure app settings and contact the Ecwid team to submit the app for review and listing

Key APIs & SDKs

Ecwid REST API
Native App JS SDK
OAuth2
Webhooks
Storefront JS API

Integration types

Embedded app
Connector
Widget

Authentication & security

  • Primary auth: OAuth 2.0
  • Also supports: API key, Webhook
  • Security review: Required
  • Public app submissions are reviewed (typically 1–2 business days); apps using unauthorized payment processors or pure advertising are rejected.
  • Ecwid review is a manual, contact-the-team process: after building you request submission, fill in the app details page, and the team reviews before publishing to all merchants.
  • REST API accepts up to 600 requests/minute per token; 429 with a Retry-After header on overrun.
Auth docs Store policies

Monetization

Free
Paid app
Usage-based
Revenue share
Onboarding
$0 (partner contract required)
Commission
Ecwid pays developers 80% of net app revenue (roughly a 20% take)
Merchant of Record
Ecwid/Lightspeed acts as MoR when using Ecwid billing

Pros & cons for builders

Pros

  • Lightweight, embeddable storefront platform with a simple REST API and JS SDK
  • Native apps embed cleanly in the Ecwid control panel for a seamless merchant UX
  • Broad reach since Ecwid stores can be embedded across many sites/platforms

Cons

  • Manual, email-driven submission flow is less self-serve than larger stores
  • Smaller, lower-ARPU merchant base caps monetization potential

Frequently asked questions

How do I get my app approved on Ecwid App Market?

Ecwid review is a manual, contact-the-team process: after building you request submission, fill in the app details page, and the team reviews before publishing to all merchants.

What authentication does Ecwid App Market use?

Ecwid App Market apps primarily authenticate with OAuth 2.0, also supporting API key, Webhook.

How is Ecwid App Market monetized?

Ecwid App Market supports Free, Paid app, Usage-based, Revenue share. Typical commission: Ecwid pays developers 80% of net app revenue (roughly a 20% take). Onboarding fee: $0 (partner contract required).

Is a security review required to list on Ecwid App Market?

Yes, Ecwid App Market requires a formal security or listing review before apps go live. Public app submissions are reviewed (typically 1–2 business days); apps using unauthorized payment processors or pure advertising are rejected.