>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #3544391. --> Reported by: [murz](https://www.drupal.org/user/157092) Related to !69 >>> <h3 id="summary-problem-motivation">Problem/Motivation</h3> <p>Now in the Decoupled module, all requests use a Drupal proxy endpoint, but for some cases we can make direct requests to the commercetools, for example, to get the list of products.</p> <h3 id="summary-proposed-resolution">Proposed resolution</h3> <p>We need to implement an option to make direct requests to commercetools for specific request types, that are safe to do. For that, we should generate and use the limited-scope credentials: <a href="https://docs.commercetools.com/tutorials/mobile-spa#limit-access-with-oauth-scopes">https://docs.commercetools.com/tutorials/mobile-spa#limit-access-with-oauth-scopes</a></p>