A partner app runs on your own server. Merchants install it from the App Store in their NUMU dashboard and approve what it may do. Your server then gets a token for that one store.The partner program opens by invitation while we onboard the first partners. To ask for an invitation, write to engineering@numueg.app. An app, or a private integration?#
| You are building | Use |
|---|
| Something for one store: your own shop, an ERP sync, an internal tool | A personal access token. No app and no review. See Authentication. |
| Something many merchants install | A partner app, described in this section |
How an install works#
1.
The merchant clicks Install in the App Store. NUMU shows a consent screen that lists your permissions as plain sentences, in Arabic or English.
2.
The merchant approves. NUMU sends them to your server with a single-use code, signed with your client secret.
3.
Your server exchanges the code for a numu_app_… token at POST /oauth/token.
4.
Your server calls the API with that token, for that store only, within the scopes the merchant approved.
5.
NUMU sends your server the webhooks your manifest lists, signed with your client secret.
6.
When the merchant uninstalls, NUMU sends app.uninstalled at once. If your manifest lists store.redact, NUMU sends it 48 hours later.
An app token next to a personal token#
The API, the base URL, the scopes and the response shapes are the same. These things differ: | Personal token numu_pat_… | App token numu_app_… |
|---|
| Created by | The merchant, in the dashboard | NUMU, when a merchant approves your app |
| Lifetime | 90 days by default | No expiry. See Token lifetime |
| Store plan | The store needs API access (Pro, or enabled by NUMU) | Works on every plan |
| Scopes | All nine domains | Everything except settings, themes:write and risk:write |
| Customer conversations | marketing | messages |
| Rate limit | 300 requests a minute, per token | The same |
The path#
Register your app
The whole path in the partner portal, step by step.
Join the partner program
Apply, get approved, create development stores.
App manifest
numu.app.json: listing, scopes, webhooks, pricing.
OAuth and app tokens
The install flow, signed links and your token.
App webhooks
Events from every store that installed you.
The numu CLI
Validate, upload, submit and publish from your terminal.
Troubleshooting apps
What each error means and what to do. Modified at 2026-09-24 14:17:29