Extensions
One page per extension. Extensions are commercial add-ons that live outside the core repository — every extension is authored and distributed from the vectiscommerce/enterprise-extensions repo and built against the open, Apache-2.0 vectis-sdk (extensions import only vectis_sdk.*, the frozen public API, never core internals). Each ext_<id>/ builds its own installable vectis-ext-<id> wheel, discovered by the core at boot via its vectis.extensions entry point; in development the sibling enterprise-extensions checkout is dev-linked instead via VECTIS_DEV_EXTENSIONS. Once discovered, you enable and configure each one per channel under Settings > Extensions in the admin. Configuration fields marked secret are stored Fernet-encrypted and masked in the admin.
These pages are for using extensions — what each one provides, how to set it up, its configuration reference, and operational notes. For authoring extensions (manifests, contribution surfaces, per-extension migrations, the vectis_sdk import surface), see Building Extensions and The Extension SDK & Testkit. For admin-panel and storefront UI contributions, see Admin Contributions and Storefront Contributions.
Payments
| Extension |
Description |
Authorize.Net (authorize_net) |
Authorize.Net CIM payment gateway — full-lifecycle payments, Accept.js tokenization, saved CIM payment profiles, FDS fraud-hold handling, and webhook settlement. |
NMI Gateway (nmi) |
NMI payment gateway with Customer Vault saved cards, Collect.js browser tokenization, 3D Secure data pass-through, and settlement postbacks. |
Affiliate Payouts (Manual CSV) (payout_csv) |
Baseline affiliate payout strategy — appends each payout run to a monthly CSV manifest for manual bank/ACH fulfilment; moves no money. |
Shipping & Fulfillment
| Extension |
Description |
AfterShip (aftership) |
Multi-carrier shipment tracking and delivery notifications via AfterShip, with an on-demand registration workflow and a scheduled status poll. |
Customer-Provided Label (customer_label) |
Zero-rate shipping option for wholesale customers who ship on their own negotiated carrier contracts, with a staff reminder to collect the customer's label. |
GoShippo (goshippo) |
Multi-carrier rate quotes, labels, and tracking through a Shippo account, with order push on placement and scheduled tracking polls. |
Local Delivery Routes (local_delivery_routes) |
Named driver delivery runs as checkout shipping options — one flat rate per qualifying route, with delivery-day messaging and driver manifests. |
OnTrac Shipping (ontrac) |
OnTrac Ground rate quotes via the ServicesAndCharges v3 API, with a built-in weight-based fallback rate and an auto-seeded method. |
OpenShip Export (openship) |
Exports orders and status updates to OpenShip, a fulfillment orchestrator, via durable queued webhook pushes with state-based routing rules. |
Priority1 LTL Freight (priority1) |
Priority1 LTL freight quotes with pallet calculation, carrier filtering, per-product freight class, hazmat, and NMFC support. |
ShipStation (shipstation) |
ShipStation v2 multi-carrier rate quotes, v1 order push for fulfillment, and scheduled tracking-number pull. |
UPS Shipping (ups) |
UPS rate quotes for five service levels via the UPS Rating API, with a fallback rate table and auto-seeded methods. |
USPS Priority Mail (usps_priority_mail) |
USPS Priority Mail domestic weight/zone, flat-rate box, and international rates priced from local rate tables — no USPS account or API calls. |
Tax
| Extension |
Description |
ExciseEngine (excise_engine) |
Per-jurisdiction excise tax via the separate ExciseEngine service — API-first with a locally-synced fallback rate engine. |
TaxJar (taxjar) |
Real-time US sales tax at cart and checkout via TaxJar, plus period liability reports and automatic order sync into TaxJar's transaction ledger. |
Fraud & Security
| Extension |
Description |
IPQualityScore (ipqs) |
Pre-payment IP reputation, email validation, and fraud scoring with allow / review / block decisions against configurable thresholds. |
MaxMind minFraud (maxmind) |
minFraud IP risk scoring, geo matching, and BIN lookup (Score/Insights/Factors tiers), plus the Report Transaction feedback loop. |
Riskified (riskified) |
Post-authorization guaranteed fraud decisions from Riskified, with chargeback reimbursement on approved orders. |
Signifyd (signifyd) |
Post-authorization guarantee decisions from Signifyd's Orders API, with chargeback reimbursement on approved orders. |
Address Verification
| Extension |
Description |
Google Maps Platform (google_maps) |
Google Address Validation with USPS DPV/RDI data, address type classification, and optional Street View imagery stored for fraud review. |
Radar (radar) |
Lightweight address verification and geocoding via the Radar API, with residential/commercial classification and place name resolution. |
ShipStation Validate Address (shipstation_address) |
Basic address normalization and deliverability checking through the ShipStation v1 validate endpoint. |
Smarty (smarty) |
USPS-grade verification with DPV/RDI, vacancy detection, CMRA indicator, and rooftop geocoding; international addresses fall back to Smarty's International Street API. |
Compliance
| Extension |
Description |
AgeChecker.Net (agechecker) |
Age verification for age-restricted products — seamless server-side identity check with a photo-ID popup fallback, gating the storefront or checkout. |
Communication
| Extension |
Description |
Amazon SES (ses) |
Transactional email delivery through the AWS Simple Email Service SendEmail API. |
Amazon SNS (sns) |
SMS delivery — templated notifications and two-factor one-time codes — through Amazon SNS publish. |
Elastic Email (elastic_email) |
Transactional email delivery through Elastic Email's v2 HTTP API. |
J'AI Chat (jai_chat) |
Conversational storefront support assistant with catalog search, cart actions, order lookup, and live-agent handoff, powered by any installed AI provider. |
Twilio SMS (twilio) |
SMS delivery — templated notifications and two-factor one-time codes — through the Twilio REST API. |
Marketing & Affiliates
| Extension |
Description |
AWIN (awin) |
Pulls Awin affiliate-network transactions and publisher performance reports into the admin for unified reporting alongside native affiliate attributions. |
Odoo Leads (odoo_leads) |
Pushes captured storefront leads into an Odoo CRM via a configured webhook handler, stamping sync status back onto each lead. |
Omnisend (omnisend) |
Pushes contacts, order events, and cart events to Omnisend for segmentation, campaigns, and abandoned-cart automation, with per-channel brands. |
AI
| Extension |
Description |
ChatGPT (chatgpt) |
Registers ChatGPT (OpenAI Chat Completions API) as a selectable platform-wide AI provider; text and vision. |
Claude (claude) |
Registers Claude (Anthropic Messages API) as a selectable platform-wide AI provider; text and vision. |
Grok (grok) |
Registers Grok (xAI Chat Completions API) as a selectable platform-wide AI provider; text only. |
MCP Catalog Server (mcp_catalog) |
Read-only Model Context Protocol server exposing the public, AI-facing product catalog; off by default and opt-in per channel. |
Search
| Extension |
Description |
Algolia Search (algolia) |
Opt-in storefront search engine backed by an Algolia application, under the same compliance-filtered index contract as the other engines. |
Storage
| Extension |
Description |
Amazon S3 (s3) |
File storage on Amazon S3 via the shared S3Service (SigV4 over httpx, no boto3), with optional CDN URL for public objects. |
DigitalOcean Spaces (digitalocean_spaces) |
File storage on DigitalOcean Spaces with a region-derived S3-compatible endpoint and optional CDN URL. |
Dropbox (dropbox) |
File storage in a Dropbox account via HTTP API v2 with OAuth2 refresh-token authentication. |
MinIO (minio) |
File storage on a self-hosted MinIO endpoint via the shared S3-compatible client. |
RustFS (rustfs) |
File storage on a self-hosted RustFS endpoint (Apache-2.0, S3-compatible MinIO alternative) via the shared S3-compatible client — the default backend in local dev. |
Data Migration
| Extension |
Description |
Shopify Import (shopify) |
Import products, customers, and orders from Shopify CSV exports or live from the Shopify Admin API; metafields auto-route into Vectis custom fields. |
WooCommerce Import (woocommerce) |
Import from WooCommerce via a direct WordPress-database read or the Woo REST API; meta.* / usermeta.* fields auto-route into Vectis custom fields. |
E-Signature
Both implement the registration module's ESignatureStrategy interface for routing onboarding agreements to an external signing provider.
| Extension |
Description |
DocuSign E-Signature (docusign) |
DocuSign-backed e-signature strategy for registration agreements (placeholder implementation — no live DocuSign API calls yet). |
Dropbox Sign (HelloSign) (hellosign) |
Dropbox Sign-backed e-signature strategy for registration agreements (placeholder implementation — no live Dropbox Sign API calls yet). |
Authentication
| Extension |
Description |
Keycloak SSO (keycloak) |
Keycloak as an OpenID Connect identity provider for admin login, with realm-role-to-Vectis-role mapping. |
Fees
| Extension |
Description |
Package Protection (package_protection) |
Optional shipment-protection fee at checkout, plus a customer claims workflow resolved with store credit and a replacement order. |
Retired
Removed from the codebase; pages retained for stores holding data these extensions seeded.
| Extension |
Description |
USPS Flat Rate (usps_flatrate) |
Retired 2026-07-04, superseded by USPS Priority Mail. Its seeded flat-rate methods and box templates keep working on existing installs. |