---
title: SwitchMall Authentication Documentation
description: Authentication requirements and public integration boundaries for SwitchMall developer resources.
canonical_url: https://switchmall.ai/developers/auth
---

# SwitchMall Authentication Documentation

## Public SwitchMall resources

No API key, OAuth token or SwitchPass account is required for these read-only interfaces:

- `GET https://switchmall.ai/api/public/v1/products/{productId}/stats`
- `GET` and `POST https://switchmall.ai/mcp`
- `GET https://switchmall.ai/gpt.json`
- `GET https://switchmall.ai/gpt/products.json`
- `GET https://switchmall.ai/llms.txt`
- `GET https://switchmall.ai/sitemap.xml`

Clients should send the documented `Accept` and `Content-Type` headers. Public rate limits and HTTP cache headers still apply.

Unauthenticated access is intended for interactive, user-requested lookups. It does not grant permission to enumerate, mirror, bulk-ingest, resell, republish, or build training datasets from the SwitchMall catalog. Approved higher-volume integrations require a separate agreement and, when available, dedicated credentials and quotas.

## Private SwitchMall application authentication

SwitchMall customer sign-in, SwitchPass sessions, social sign-in callbacks, administrative endpoints and background jobs are first-party application interfaces. They are not a supported public developer authentication API. Do not automate those endpoints or embed application credentials in third-party integrations.

If SwitchMall publishes an authenticated partner API in the future, its credential flow, scopes and token lifecycle will be added to this page and the [SwitchMall OpenAPI specification](https://switchmall.ai/openapi.json).

## Related documentation

- [SwitchMall Public API](https://switchmall.ai/developers/api)
- [SwitchMall MCP server](https://switchmall.ai/developers/mcp)
- [SwitchMall webhooks](https://switchmall.ai/developers/webhooks)