Prompt your idea. We scaffold a Next.js + BC Cloud SDK single-click app with OAuth, JWT-on-load, HMAC-verified webhooks (per BC's documented X-BC-Signature spec), GDPR remove-user, and BC v3 API client. Generate Marketplace listing fields + walk you through the Dev Portal submission.
Launch a BigCommerce app →See pricing →21-file production-ready BC app with the OAuth single-click trio (install + callback + load), JWT-verified load endpoint, HMAC-verified webhook handler, BC v3 API client with 429-aware retry, and GDPR remove-user endpoint.
Webhook signature verification (5 invariants from Spike 5.B0), OAuth scope minimisation with stable store_<v>_<resource> naming, no client secret in frontend, BC API versioning (v3 not v2), CSP frame-ancestors, multi-user enabled.
BC keeps app submission + sandbox creation in Dev Portal — no API exists for either (verified in Spike 5.B0, ~45min). We surface the Marketplace listing fields, sandbox-store guided 3-step Stepper, and a 6-step Dev Portal walkthrough.
Tier-aware gate evaluates BC scope-justifications + Playwright + open BC rejections. 13 BC-specific rejection categories (single-click violations, scope over-requesting, multi-user not supported, billing not implemented, etc.) sourced from BC App Marketplace review patterns.
Describe a change in plain English — hosted Iterate reads your repo and edits against the BC-aware system prompt: the OAuth single-click trio, jwt.verify HS256 path (jwt.decode is a catastrophic auth bypass), webhook spec invariants, multi-user requirement.
Generated app ships pages/api/billing/charge.ts + callback.ts + lib/billing.ts wired to BC's /v3/store/<hash>/billing endpoint. Reads pricing.yaml at runtime — same shape as the Shopify scaffold.
Pick a vertical or start blank. Wizard pre-fills the BC-flavored scaffold + scopes + features.
Your wizard brief becomes a production build against the BC-aware conventions — checker-bigcommerce gates every change. We commit to your real GitHub repo.
Vercel deploy. Sandbox guided fallback. Submit gate. Generate listing fields. Follow the 6-step Dev Portal walkthrough on the submit page.
Free tier covers one active app. No card required.