Domains

The official domains for accessing the API are: 

HTTPS

The API can only be accessed using HTTPS:

User Agent

The API can only be accessed providing a valid User-Agent: 

API Key

The API (read api.spreadshirt.net, api.spreadshirt.com) can only be access providing at least an API Key: 

Test API Compatibility

You can test that your application works with the new requirements by accessing shop data and providing an X-Api-Key-Test header: 

curl -v 'http://api.spreadshirt.net/api/v1/shops/205909'

vs. 

curl -H 'X-Api-Key-Test: yes' 'http://api.spreadshirt.net/api/v1/shops/205909'

Now, from there on 

curl -v -H 'X-Api-Key-Test: yes' -H 'User-Agent: MyApp/0.1 (https://www.myapp.com; admin@myapp.com)' -H 'Authorization: SprdAuth apiKey="..."' 'https://api.spreadshirt.net/api/v1/shops/205909' > /tmp/out