curl --request POST \
  --url https://studio.weaverse.io/api/v1/content/projects \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "op": "create"
}'

{
  "object": "project_settings_updated",
  "projectRevision": "2026-10-20T10:02:13.000Z"
}

{
  "object": "project_created",
  "id": "clz3a1b2c0004efgh7890ijkl",
  "name": "New storefront"
}

{
  "object": "project_copy_started",
  "targetProjectId": "clz3a2c3d0005efgh1234mnop"
}

{
  "object": "error",
  "code": "UNAUTHORIZED",
  "message": "<string>",
  "status": 123,
  "details": "<unknown>"
}

{
  "object": "error",
  "code": "UNAUTHORIZED",
  "message": "<string>",
  "status": 123,
  "details": "<unknown>"
}

{
  "object": "error",
  "code": "UNAUTHORIZED",
  "message": "<string>",
  "status": 123,
  "details": "<unknown>"
}

{
  "object": "error",
  "code": "UNAUTHORIZED",
  "message": "<string>",
  "status": 123,
  "details": "<unknown>"
}

{
  "object": "error",
  "code": "STALE_PROJECT",
  "message": "This project changed after it was loaded. Reload before saving.",
  "status": 409
}

Projects

Run a project lifecycle operation

Shop-scoped project lifecycle. The body’s op field selects the operation:

create: creates a project in the caller’s shop. name is required (1-100 characters). Set config.themeName to seed it from a theme; omit it or pass blank for a blank project with generated storefront pages. If the theme seed fails, a blank project is created instead and the response carries a warning. Returns 201 with object: "project_created".
copy: clones sourceProjectId into the caller’s shop. The source must be this shop’s own project or a public demo-store project; any other shop’s project returns 404. The clone runs in the background: the response is 202 with object: "project_copy_started" and the targetProjectId. Observe completion by listing the target project’s pages. name defaults to Copy of <source name>.
delete: soft-deletes projectId (a backup is taken first) and purges its caches. confirm must equal the projectId, otherwise 400. A project that still has variant (child) projects returns 409 CONFLICT (HAS_VARIANTS). Returns 200 with object: "project_deleted".
set-settings: revision-fenced write of non-secret settings (name, defaultLocale). Pass the project’s current revision (from GET /projects/{projectId}) as expectedUpdatedAt; if the project changed since, the request returns 409 STALE_PROJECT and writes nothing. defaultLocale is the full Hydrogen i18n object Studio stores (label, language, country, pathPrefix). Returns 200 with object: "project_settings_updated" and the new projectRevision.
purge-cache: the Studio “Clear cache” action. Invalidates the project’s caches without touching content. Returns 200 with object: "cache_purged".

Every operation other than create and copy must target a live project owned by the caller’s shop; otherwise 404.

Required scope: project:manage (delete also requires content:delete)

POST

projects

curl --request POST \
  --url https://studio.weaverse.io/api/v1/content/projects \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "op": "create"
}'

{
  "object": "project_settings_updated",
  "projectRevision": "2026-10-20T10:02:13.000Z"
}

{
  "object": "project_created",
  "id": "clz3a1b2c0004efgh7890ijkl",
  "name": "New storefront"
}

{
  "object": "project_copy_started",
  "targetProjectId": "clz3a2c3d0005efgh1234mnop"
}

{
  "object": "error",
  "code": "UNAUTHORIZED",
  "message": "<string>",
  "status": 123,
  "details": "<unknown>"
}

{
  "object": "error",
  "code": "UNAUTHORIZED",
  "message": "<string>",
  "status": 123,
  "details": "<unknown>"
}

{
  "object": "error",
  "code": "UNAUTHORIZED",
  "message": "<string>",
  "status": 123,
  "details": "<unknown>"
}

{
  "object": "error",
  "code": "UNAUTHORIZED",
  "message": "<string>",
  "status": 123,
  "details": "<unknown>"
}

{
  "object": "error",
  "code": "STALE_PROJECT",
  "message": "This project changed after it was loaded. Reload before saving.",
  "status": 409
}

Authorizations

Authorization

string

header

required

Bearer authentication: a shop API key (WEAVERSE_API_KEY), a scoped API key, a delegated MCP OAuth token, or (translation-unit routes only) a project-bound translation agent token. Scopes: content:read — Read projects, pages, theme settings, versions, drafts and translation units. content:write — Save drafts and make non-destructive edits (page items, metadata, SEO, assignments, languages, glossary). Never publishes or deletes. content:publish — Publish drafts, schedule/reschedule/cancel publications, restore versions, publish global sections. content:delete — Delete pages, global sections, languages, static keys, override reverts; required with project:manage for project deletion. project:manage — Create/copy/delete projects, settings, variants, hierarchy, backups, restore-as-new, previews, hostname policy. translations:read — Read translation units only (no general content access). translations:write — Apply translation units only; never mutates page content. A legacy unscoped API key keeps read/write/translation baseline access and every pre-scope endpoint, but never gains publish/delete/project-manage implicitly.

Body

application/json

Option 1
Option 2
Option 3
Option 4
Option 5

any

required

name

string

projectId

string

Optional client-chosen id

config

object

Show child attributes

Response

Operation result

The response is of type object.

Get started

Projects

Pages

Assignments

Theme settings

Languages and localization

Specification

Translations

Drafts and publishing

Global sections

Page settings

Project structure

Backups and portability

Previews and hostnames

Run a project lifecycle operation

Authorizations

Body

Response