Node.js
import Shoply from "@shoplygg/node";
const shoply = new Shoply({ apiKey: process.env.SHOPLY_API_KEY });
const result = await shoply.allowlist.setEnabled("ENTRY_ID", {
enabled: true,
});
<?php
require 'vendor/autoload.php';
$shoply = new Shoply\Client(['apiKey' => getenv('SHOPLY_API_KEY')]);
$result = $shoply->allowlist->setEnabled('ENTRY_ID', [
'enabled' => true,
]);
import shoply
client = shoply.Client() # reads SHOPLY_API_KEY
result = client.allowlist.setEnabled("ENTRY_ID", enabled=True)
curl --request PATCH \
--url https://api.shoply.gg/v1/stores/{storeId}/allowlist/{entryId}/enabled \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"enabled": true
}
'package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.shoply.gg/v1/stores/{storeId}/allowlist/{entryId}/enabled"
payload := strings.NewReader("{\n \"enabled\": true\n}")
req, _ := http.NewRequest("PATCH", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.patch("https://api.shoply.gg/v1/stores/{storeId}/allowlist/{entryId}/enabled")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"enabled\": true\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.shoply.gg/v1/stores/{storeId}/allowlist/{entryId}/enabled")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Patch.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"enabled\": true\n}"
response = http.request(request)
puts response.read_body{
"success": true,
"message": null,
"code": null,
"data": {
"id": "9e5f6d71-5b8f-4b4e-89da-c88b2c92485b",
"type": "cidr",
"value": "203.0.113.0/24",
"note": "Our office and the warehouse",
"enabled": true,
"source": "manual",
"customerId": null,
"hits": 0,
"lastHitAt": null,
"dateCreated": "2026-10-28T10:47:39Z",
"updatedAt": "2026-10-28T10:47:39.474Z"
}
}{
"success": false,
"message": "<string>",
"code": "<string>",
"data": null,
"errors": {}
}{
"success": false,
"message": "<string>",
"code": "<string>",
"data": null,
"errors": {}
}{
"success": false,
"message": "<string>",
"code": "<string>",
"data": null,
"errors": {}
}{
"success": false,
"message": "<string>",
"code": "<string>",
"data": null,
"errors": {}
}{
"success": false,
"message": "<string>",
"code": "<string>",
"data": null,
"errors": {}
}Allowlist
Switch an allowlist entry on or off
Changes whether the entry is in force, without sending the rest of it.
Needs the fraud.write permission (Change Fraud Protection).
PATCH
/
stores
/
{storeId}
/
allowlist
/
{entryId}
/
enabled
Node.js
import Shoply from "@shoplygg/node";
const shoply = new Shoply({ apiKey: process.env.SHOPLY_API_KEY });
const result = await shoply.allowlist.setEnabled("ENTRY_ID", {
enabled: true,
});
<?php
require 'vendor/autoload.php';
$shoply = new Shoply\Client(['apiKey' => getenv('SHOPLY_API_KEY')]);
$result = $shoply->allowlist->setEnabled('ENTRY_ID', [
'enabled' => true,
]);
import shoply
client = shoply.Client() # reads SHOPLY_API_KEY
result = client.allowlist.setEnabled("ENTRY_ID", enabled=True)
curl --request PATCH \
--url https://api.shoply.gg/v1/stores/{storeId}/allowlist/{entryId}/enabled \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"enabled": true
}
'package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.shoply.gg/v1/stores/{storeId}/allowlist/{entryId}/enabled"
payload := strings.NewReader("{\n \"enabled\": true\n}")
req, _ := http.NewRequest("PATCH", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.patch("https://api.shoply.gg/v1/stores/{storeId}/allowlist/{entryId}/enabled")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"enabled\": true\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.shoply.gg/v1/stores/{storeId}/allowlist/{entryId}/enabled")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Patch.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"enabled\": true\n}"
response = http.request(request)
puts response.read_body{
"success": true,
"message": null,
"code": null,
"data": {
"id": "9e5f6d71-5b8f-4b4e-89da-c88b2c92485b",
"type": "cidr",
"value": "203.0.113.0/24",
"note": "Our office and the warehouse",
"enabled": true,
"source": "manual",
"customerId": null,
"hits": 0,
"lastHitAt": null,
"dateCreated": "2026-10-28T10:47:39Z",
"updatedAt": "2026-10-28T10:47:39.474Z"
}
}{
"success": false,
"message": "<string>",
"code": "<string>",
"data": null,
"errors": {}
}{
"success": false,
"message": "<string>",
"code": "<string>",
"data": null,
"errors": {}
}{
"success": false,
"message": "<string>",
"code": "<string>",
"data": null,
"errors": {}
}{
"success": false,
"message": "<string>",
"code": "<string>",
"data": null,
"errors": {}
}{
"success": false,
"message": "<string>",
"code": "<string>",
"data": null,
"errors": {}
}Authorizations
A secret API key, made under Developers in the dashboard: Authorization: Bearer shoply_sk_...
Headers
A word of your own for this one change, up to 180 letters, digits, dots, dashes, underscores and colons. Sent again with the same key, the request is not carried out twice: the first answer comes back, with Idempotent-Replay: true.
Path Parameters
The store's ID. A key reaches the store it was made in: GET /key answers which.
The entry.
Body
application/json
Whether the entry is in force.

