Verify your site.
Add your site URL during onboarding. Prove ownership with a meta tag, a .well-known file, or a DNS TXT record.
Keep your existing frontend — WordPress, Next.js, Shopify, a hand-rolled HTML page. Engine handles products, cart, checkout, payments, orders, GST invoices, and webhooks. You ship one script tag.
Add your site URL during onboarding. Prove ownership with a meta tag, a .well-known file, or a DNS TXT record.
<script type="module" src="https://aeonzap.com/sdk/aeonzap.js"> </script>
Aeonzap.init({ key });
const products =
await Aeonzap.products.list();Same product list. One side you maintain. The other side ships in fifteen minutes.
// db migrations · API routes · auth · // inventory rules · pricing · GST split · // checkout state machine · payment retries · // webhook signing · idempotency tokens · // ... maintain forever
import { Aeonzap } from '@aeonzap/sdk';
const az = Aeonzap.init({ key: KEY });
const products = await az.products.list();
const cart = await az.cart.add({
productId: 'pid_01',
qty: 1,
});
const { checkoutUrl } = await az.checkout.create({
cartId: cart.id,
payment: 'razorpay',
});Step-by-step guides for the four most common setups. Each one ends with a live cart and a real Razorpay checkout.
WordPress
PHP + theme partials
Next.js
React + App Router
Shopify
Liquid theme partial
Custom HTML
Any static site
No SaaS lock-in shims. No proprietary serverless functions. Just HTTPS, JSON, and a 4kB ES module.
List, filter, paginate. Variants, inventory, pricing rules, media — all served from our CDN.
Server-side carts keyed by your customer or anonymous token. Apply codes, ship rates, taxes — get a hosted or headless checkout URL.
Push order.created, order.paid, refund.issued to your backend. HMAC-signed, retried with exponential backoff.
Inbound keys only accept browser calls from domains you allowlist. Server keys for backend-to-backend calls.
Edge-cached product reads, P50 under 80ms from India. Carts and orders hit the primary write region.
Pass Idempotency-Key on order creation. Retry safely — duplicates collapse to the first successful write.
Unlimited API calls. Fair-use rate limits.