Authentication

All Direct API requests must include your API key in the X-API-Key header. The key must always be sent as a header — never as a query parameter (doing so returns 401 Authentication required).

Endpoint

POST https://api.wearo.io/functions/v1/tryon-api

Required headers

Header	Required	Description
`X-API-Key`	Yes	Your Wearo API key (starts with `wearo_`)
`Content-Type`	Yes	Must be `application/json`
`Origin`	Conditional	Required when domain restrictions are active on your key

Example

curl -X POST "https://api.wearo.io/functions/v1/tryon-api" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: wearo_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -d '{ ... }'

Get your API key

Don’t have a key? Get one from your dashboard →

Domain restrictions

If you’ve configured domain restrictions on your key, include the Origin header:

-H "Origin: https://mystore.com"

Learn more about domain restrictions →

Getting started

Install the widget

Configure the widget

Direct API

Privacy & compliance

Resources

Authentication

Authentication

Endpoint

Required headers

Example

Get your API key

Domain restrictions

​Authentication

​Endpoint

​Required headers

​Example

​Get your API key

​Domain restrictions

Authentication

Endpoint

Required headers

Example

Get your API key

Domain restrictions