Stored instruments manifest and payments service URL in the GraphQL Storefront API
The site.storedInstrumentsManifest and site.settings.url.paymentBaseUrl fields are now documented in the GraphQL Storefront API guides. They supply the client-side pieces a storefront needs alongside the vaulting mutations, and neither requires a customer JWT.
storedInstrumentsManifest: returns the JavaScript bundle that renders the stored instruments UI, where a shopper manages the payment methods saved to their account. The manifest resolves per environment, so asset URLs are not hardcoded. It returnsbaseUrl,version,appVersion, and ascriptslist, each entry carrying asrcand a Subresource Integrityintegrityhash. Load the scripts in the order returned and apply eachintegrityvalue to its tag.paymentBaseUrl: returns the base URL of the payments service backing the storefront, for examplehttps://payments.bigcommerce.com. Use it to build payments service requests rather than hardcoding a host, so the same storefront code works against whichever environment the store resolves to.- Gated per store: when stored instruments are not enabled,
storedInstrumentsManifestresolves tonull. Check fornulland treat it as the feature being unavailable on the store rather than a transient error.
Both fields are in alpha and are marked deprecated in the schema to signal that status. Their shape may change without notice. Do not use them in production.
For details, see Get the stored instruments manifest and Get the payments service base URL in the Customers guide.
Corrected consent category IDs for the Storefront Cookie Consent API
Thanks to user feedback, the Set Cookie Consent Preferences reference now lists the category IDs that the endpoint actually uses. Before this fix, sending the documented IDs could leave targeting cookies denied.
- Configurable categories:
2is Functional,3is Analytics, and4is Targeting; Advertising. - Essential:
1is Essential and is always allowed. The endpoint accepts1inallowordeny, but including it indenyhas no effect. - Request example: the example now sends a complete set of categories:
allow: [2, 3]anddeny: [4].
For details, see Set Cookie Consent Preferences.