Get a single product by id

GET 
/products/:id

Returns the single product with the given stable Mocart product document id.

Request

Responses

200

OK. The single product.

401

Unauthorized. Missing, malformed, unknown, revoked, or expired bearer token — or the token owner no longer holds the required entitlement (ENTITLEMENT_LOST). A uniform problem body is returned with a distinct code; no owner/condition detail (no-leak).

403

Forbidden. The token does not carry the required scope (API_TOKEN_SCOPE_DENIED).

404

Not Found. No product matched the identifier (PRODUCT_NOT_FOUND). A cross-tenant id returns this SAME uniform 404 (no-leak).

429

Too Many Requests. The per-token sliding window of 200 requests/minute was exceeded. The body is express-rate-limit's DEFAULT plain-text message (NOT the JSON problem+json envelope).

Response Headers

RateLimit

IETF draft-7 rate-limit policy/state (limit, remaining, reset).

Retry-After

Seconds to wait before retrying.