> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tailoredd.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ReviewFlow API introduction

> Get started with the ReviewFlow REST API to collect, moderate, display, and analyze customer reviews and Q&A on your e-commerce storefront.

## Overview

ReviewFlow is the Tailoredd reviews and Q\&A platform. The API is REST-based with JSON responses.

<CardGroup cols={2}>
  <Card title="REST + JSON" icon="code">
    Standard HTTP verbs. Every response returns `{ "success": true, "data": ... }` or a structured error.
  </Card>

  <Card title="Header auth" icon="lock">
    All requests require `X-Merchant-Id`. Server calls add `X-API-Key`; admin calls add `Authorization`.
  </Card>

  <Card title="Plan-gated features" icon="layer-group">
    Some endpoints return `403 PLAN_UPGRADE_REQUIRED` on Standard plan. See [Plans](/getting-started/plans).
  </Card>

  <Card title="Get access" icon="envelope">
    You receive your Base URL, Merchant ID, and API Key after onboarding. Email [contact@tailoredd.com](mailto:contact@tailoredd.com).
  </Card>
</CardGroup>

## Your credentials

After you sign the contract, Tailoredd provisions the following:

| Credential          | Description                                                                                                                            |
| ------------------- | -------------------------------------------------------------------------------------------------------------------------------------- |
| **Base URL**        | Production uses `https://cdn.tailoredd.com/apiV2`; staging uses the direct `apiV2` endpoint. Set as `RF_BASE_URL` in your environment. |
| **Merchant ID**     | Sent as `X-Merchant-Id` on every request.                                                                                              |
| **API Key**         | Server-side secret. Prefix `tr_`. Set as `RF_API_KEY`. Never expose client-side.                                                       |
| **Webhook Secret**  | Used to sign `X-Webhook-Signature` on order-complete calls.                                                                            |
| **Allowed Origins** | Whitelisted domains for browser/widget requests.                                                                                       |

<Note>
  Contact [contact@tailoredd.com](mailto:contact@tailoredd.com) for Merchant ID, API Key, webhook secret, and allowed-origin setup.
</Note>

## Quick start

```bash theme={null}
curl -X GET \
  "${RF_BASE_URL}/products/${PRODUCT_ID}/reviews?limit=10&sort=newest" \
  -H "X-Merchant-Id: YOUR_MERCHANT_ID" \
  -H "X-API-Key: YOUR_API_KEY"
```