# Public (https://docs.loybox.com.ar/en/api-reference/publico)



Endpoints that **require no token at all**, only the `X-Commerce-Id` header.

They exist to show your loyalty program to a visitor who has not signed in yet: the
branding in the header and the reward catalog, so they can see what they get by
joining.

```
X-Commerce-Id: {your-commerce-id}
```

## The endpoints
<Cards>
  <Card title="Commerce data" icon="Building2" description="Name, logo, brand color and category, to paint the header." href="/api-reference/publico/comercio" />

  <Card title="Benefit catalog" icon="Gift" description="The commerce's live benefits." href="/api-reference/publico/beneficios" />
</Cards>

## After sign-in there is no need to ask again
Once the user signs in, the same data comes back through the
[My account](https://docs.loybox.com.ar/api-reference/mi-cuenta) endpoints:

| Signed out                                                     | Signed in                                                                          |
| -------------------------------------------------------------- | ---------------------------------------------------------------------------------- |
| [`GET /v1/public/commerce`](https://docs.loybox.com.ar/api-reference/publico/comercio)   | Comes inside [`GET /v1/me`](https://docs.loybox.com.ar/api-reference/mi-cuenta/obtener)                      |
| [`GET /v1/public/benefits`](https://docs.loybox.com.ar/api-reference/publico/beneficios) | [`GET /v1/me/benefits/available`](https://docs.loybox.com.ar/api-reference/mi-cuenta/beneficios-disponibles) |

In practice: use the public ones for the welcome screen, and switch to the My
account ones as soon as there is a session.

<Callout type="info" title="X-Commerce-Id is not a secret">
  It goes in the frontend without a problem. What it does is scope the response to
  your commerce, not authorize access.
</Callout>