Yotpo

What you can build

• Answer a low-star review through the right channel

  A review_create webhook arrives with a score of 1 or 2. The operator matches the reviewer to the order and support history and proposes a reply draft, plus a follow-up ticket for your team.

  With Review Response, Review Reply

• Find the theme behind a rating drop

  The operator pulls recent reviews by sku and sentiment, groups the complaints, and proposes a summary with the products and dates involved.

  With Feedback Themes, Sentiment Spike

• Send the review request after delivery, not shipment

  The operator posts orders and fulfillments as your store reports them, so review_request.eligible.on_delivery fires when the parcel arrives. Each order is posted once; a repeat returns 409.

  With Survey Timing

• Hold a product with a quality complaint

  When several reviews on one sku report the same defect, the operator proposes a hold in your inventory system and attaches the review ids as evidence.

  With Quality Hold

Requirements

• A Yotpo Reviews account, its Store ID (formerly App Key), and the API secret, which only the account administrator can see
• For review requests, orders posted to the Core API with external_id, order_date within six months, customer, and line_items
• For webhooks, an HTTPS callback URL under 2,048 characters, registered as a target, with a filter and a subscription

Authentication

An access token from POST /oauth/token with your Store ID as client_id, your API secret as client_secret, and grant_type client_credentials, sent on each request in the X-Yotpo-Token header.

Limits

• Retrieve all reviews allows 5,000 requests per minute per app key; the Core API allows 5 requests per second per store
• Search results on api-cdn.yotpo.com lag by about 3 hours
• Yotpo cannot send automatic review requests for orders older than six months
• Create Review is asynchronous and emails a verification link to each customer named, so it does not suit importing moderated reviews

Questions and answers

How does the connector authenticate?

It exchanges your Store ID and API secret for an access token at POST /oauth/token with grant_type client_credentials, then sends the token in the X-Yotpo-Token header. Tokens can expire; a 401 means generate a new one. Only the account administrator can see the secret.

Does Yotpo push review events?

Yes, through Core API webhooks. You create a target with your callback URL, a filter with the topics, and a subscription that links them. Topics include review_create, review_updated, review_request.eligible.on_fulfillment, and review_request.eligible.on_delivery. Each delivery carries a WebhookMessageIdPerTarget header and is retried at least 10 times with exponential backoff.

How far back can reviews be pulled?

Retrieve all reviews accepts since_date, since_id, and since_updated_at, with up to 100 reviews per page and deleted set to true to include unpublished ones. The endpoint allows 5,000 requests per minute per app key. Search on api-cdn.yotpo.com is faster to query but lags by about 3 hours.