window.webstorio. Use it in page code to load CMS content, submit forms, manage carts, and handle visitor sign-in.
Runtime
Feature-gated methods
Methods only work when the matching website feature is enabled:
Check what’s active:
Method index
General
General
CMS
CMS
getContentTypes, getContentEntries, getContentEntryById, getContentCategories, getContentCategoryById→ CMS SDKForms
Forms
getFormSchema, getForm, submitForm, getFormSubmissions,
getFormSubmissionById→ Forms SDKApp Data
App Data
getDataModels, listRecords, getRecord, createRecord, updateRecord, deleteRecord→ App Data SDKStore
Store
Catalog:
getStore, getProducts, getProductById, getProductBySlug, getProductCategoriesCart: getCart, addToCart, setCartItems, setCartItemQuantity, removeFromCart, clearCartOrders: createOrder, getMyOrders, getMyOrderById→ Store SDKAuth
Auth
signInWithWebstorio, signOut, getSession, getCurrentUser, getAuthConfig→ Auth SDKDynamic routes
Pages with wildcard slugs likeblog/{content_entry_id} expose params synchronously:
Sessions and permissions
- Reads — usually public; no sign-in required.
- Writes — forms, orders, and App Data may require
credentials: "include"and/or a signed-in visitor. - App Data — each table’s access preset (public read, signed-in write, etc.) applies.
Calling a method
Every method is available on the globalwindow.webstorio object and returns a promise:

