The official domains for accessing the API are:
The API can only be accessed using HTTPS:
The API can only be accessed providing a valid User-Agent:
The API (read api.spreadshirt.net, api.spreadshirt.com) can only be access providing at least an API Key:
You can test that your application works with the new requirements by accessing shop data and providing an X-Api-Key-Test header:
curl -v 'http://api.spreadshirt.net/api/v1/shops/205909'
curl -H 'X-Api-Key-Test: yes' 'http://api.spreadshirt.net/api/v1/shops/205909'
Now, from there on
curl -v -H 'X-Api-Key-Test: yes' -H 'User-Agent: MyApp/0.1 (https://www.myapp.com; email@example.com)' -H 'Authorization: SprdAuth apiKey="..."' 'https://api.spreadshirt.net/api/v1/shops/205909' > /tmp/out