Capabilities & Headless Support Matrix

One table answering what Kanorio supports today across 7 business primitives and 5 platform domains—and how each capability is exposed across APIs, drop-in Elements, the hosted site, and Webhooks.

7 Business Primitives + 5 Platform Domains

Business primitives model your domain data and rules; platform domains provide shared identity, media, events, messaging, and edge delivery.

1. ContentAvailable

Custom collections, blog system collections, pages, header/footer globals, redirects, draft & preview.

2. Customers & MembershipAvailable

Unified Contact SSOT, dynamic segments, passwordless customer login, commercial entitlements.

3. Credits & Stored ValuePlanned

Points, store credit, prepaid passes, FIFO expiration and append-only ledger.

4. Products & PromotionsAvailable

Digital and physical products, variants (pricing tiers), categories, discount codes and automatic promotions.

5. Bookings & ResourcesPlanned

Time slots, staff/equipment resources, holds, rescheduling and cancellation.

6. Orders & FormsAvailable

Commerce transactions (Order, checkout, refunds, receipts) and form data submissions (FormSubmission, anti-abuse).

7. DeliverablesAvailable

Entitlement-protected digital content (courses, downloads), chapter/unit trees, signed playback and progress.

8. Identity, Tenant & AuthorizationAvailable

Site team RBAC, tenant isolation (WebsiteScope), PAT/OAuth 2.1 for agents, Customer Session Bearer for buyers.

9. Media & AssetsAvailable

WebsiteAsset ledger, Cloudflare Images variants, LQIP placeholders, R2 private bucket signed URLs.

10. Events & Reliable ExecutionAvailable

Signed webhooks with retry, per-event filters, publicVersion & cacheTags for ISR cache invalidation.

11. Messaging & ReachAvailable

Transactional notifications, email campaigns, custom sender domains, per-channel consent & suppression.

12. Site Delivery & OperationsPartial

Edge-cached Delivery API, full-text search, custom domains, plus hosted-site SEO, speed and analytics.

1. Content

Available

Custom collections, blog system collections, pages, header/footer globals, redirects, draft & preview.

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Collections (structured content)	Available	Agent `collections.`, `items.`; Delivery `GET /collections/*` (`assets` map, `expand` full `fieldData`, `has_slug` / `eq_slug`); CLI `kanorio types`	—	`/data` workbench; collection list / detail pages	`collections.item.*`, `collections.items.bulkChanged`, `collections.schema.changed`
Blog (system collections)	Available	Agent `posts.*`, `blog_categories.list`, `blog_tags.list`; Delivery `GET /collections/blog/items` (`?formats=markdown,html,plaintext`, `segments[]`, `toc[]`)	—	`/posts` editor, `/data/blog`; hosted `/blog`, `/blog/:slug`	`collections.item.*`
Pages, globals (header/footer) & redirects	Available	Agent `pages.`, `globals.`, `site.publish`; Delivery `GET /pages`, `GET /pages/:slug`, `GET /globals/headers/:key`, `GET /globals/footer`, `GET /redirects`	—	`/editor` visual builder	`content.page.*`, `content.site.published` (with `previousSlug` & `cacheTags`)
Draft preview tokens (`knr_pv_`)	Available	Agent `site.create_preview_token`; Delivery `X-Kanorio-Preview: knr_pv_...` (edge HMAC verified, bypasses cache)	—	`/settings/developer` preview token manager; `/console` Preview button	—

2. Customers & Membership

Available

Unified Contact SSOT, dynamic segments, passwordless customer login, commercial entitlements.

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Contacts & dynamic segments	Available	Agent `contacts.`, `segments.`	—	`/customers/contacts`, `/data/contacts`, `/data/segments`	`customers.form.submitted`
Customer login (magic link / 6-digit code)	Available	Customer `POST /auth/challenge`, `POST /auth/verify` → Bearer; `GET /me`; `DELETE /session`	`<kanorio-login>` (stores Bearer in localStorage, `kanorio:login` event)	`/account/login`	—
Entitlements (who may access what)	Available	Agent `entitlements.grant` / `revoke` / `list` / `check`; Customer `GET /access/:id`	`<kanorio-unit>` shows locked / preview / not-released states	Backoffice contact → Access tab; `/data/entitlements`; `/account/content`	`deliverables.entitlement.granted`, `deliverables.entitlement.revoked`
Membership tiers (ranked segments & automatic perks)	Planned	Planned (`tiers.*`)	—	Planned (`/data/tiers`)	—

3. Credits & Stored Value

Planned

Points, store credit, prepaid passes, FIFO expiration and append-only ledger.

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Points, store credit & prepaid pass ledger	Planned	Planned (`credits.*`)	—	Planned (`/data/credit_accounts`, `/data/credit_ledger`)	—

4. Products & Promotions

Available

Digital and physical products, variants (pricing tiers), categories, discount codes and automatic promotions.

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Products, variants & categories	Available	Agent `products.`, `product_categories.`; Delivery `GET /products`, `GET /products/:slug`	—	`/store/products`, `/data/products`, `/data/product_variants`, `/data/product_categories`	—
Promotions & discount codes Promotions are evaluated on the system-hosted checkout page.	Partial	Agent `promotions.*` (applied automatically at hosted checkout)	—	`/marketing/promotions`, `/data/promotions`	—

5. Bookings & Resources

Planned

Time slots, staff/equipment resources, holds, rescheduling and cancellation.

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Resource scheduling, time slots & bookings	Planned	Planned (`resources.`, `bookings.`)	—	Planned (`/data/resources`, `/data/bookings`)	—

6. Orders & Forms

Available

Commerce transactions (Order, checkout, refunds, receipts) and form data submissions (FormSubmission, anti-abuse).

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Orders & hosted checkout	Available	Agent `orders.*`; Customer `GET /orders`, `GET /orders/:id`	—	`/orders`, `/data/orders`; system-hosted checkout & `/account/orders`	`ec.order.paid`
Forms & lead capture	Available	Agent `forms.list/get`, `submissions.list/get`; Delivery `GET /forms/:id`, `GET /forms/:id/challenge`, `POST /forms/:id/submit`	—	`/marketing/forms`, `/data/form_submissions`; page `form` section	`customers.form.submitted`

7. Deliverables

Available

Entitlement-protected digital content (courses, downloads), chapter/unit trees, signed playback and progress.

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Deliverables (courses, downloads)	Available	Agent `deliverables.`, `deliverable_units.`; Delivery `GET /products/:slug` outline; Customer `GET /deliverables`, `GET /deliverables/:key`	`<kanorio-curriculum>` (public outline, free previews)	`/store/deliverables`, `/data/deliverables`, `/data/deliverable_units`; product `content-curriculum` section	—
Protected playback & downloads	Available	Customer `POST /units/:id/open` (600 s signed URL); Delivery `POST /units/:id/open` for previews	`<kanorio-unit>` (video, audio, PDF, text, files, embeds)	`/account/content/%3Akey`	—
Progress & completion	Available	Customer `POST /progress`, `GET /deliverables/:key/progress`; Agent `progress.list`	`<kanorio-unit>` reports progress automatically; `kanorio:progress` event	`/data/progress`; `/account/content` progress bars	`deliverables.progress.completed`

8. Identity, Tenant & Authorization

Available

Site team RBAC, tenant isolation (WebsiteScope), PAT/OAuth 2.1 for agents, Customer Session Bearer for buyers.

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Site team RBAC, Agent PAT / OAuth 2.1 & Customer Session Bearer	Available	PAT (`knr_pat_`), OAuth 2.1 (`knr_at_`) with site scope; Customer Bearer (`knr_cat_`) bound to `(websiteId, contactId)`	`<kanorio-login>`	`/settings/team`, `/account/api-access`	—
Custom end-user application roles (e.g. teacher / TA / branch manager in your own app) Kanorio separates operational RBAC (site team), customer commercial entitlements (`Entitlement`), and plan entitlements. Fine-grained custom app roles (e.g. "teacher can only view students in class B") are not offered as a platform primitive; enforce them in your own application backend or an authorization service such as OpenFGA.	Not offered	—	—	—	—

9. Media & Assets

Available

WebsiteAsset ledger, Cloudflare Images variants, LQIP placeholders, R2 private bucket signed URLs.

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Public media, responsive images, LQIP placeholders & lightbox	Available	Agent `media.*`; Delivery `assets` map (`url`, `width`, `height`, `placeholder` 16px WebP data URL)	`<kanorio-media src mime-type>`, `<kanorio-lightbox images='[…]'>`	`/media` library; gallery & media sections	—

10. Events & Reliable Execution

Available

Signed webhooks with retry, per-event filters, publicVersion & cacheTags for ISR cache invalidation.

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Signed webhooks, per-event filters & ISR cache tags	Available	Agent `webhooks.*` (`filter.collectionKeys`, `filter.formIds`); SDK `parseDeliveryCacheTags`	—	`/settings/webhooks`	All `TEAM_SUBSCRIBABLE_EVENT_KEYS` (HMAC-SHA256 signed, automatic retries)

11. Messaging & Reach

Available

Transactional notifications, email campaigns, custom sender domains, per-channel consent & suppression.

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Transactional emails, newsletters & custom sender domain	Available	Agent `campaigns.*`	—	`/marketing/campaigns`, `/settings/email`	—

12. Site Delivery & Operations

Partial

Edge-cached Delivery API, full-text search, custom domains, plus hosted-site SEO, speed and analytics.

Capability	Status	API + SDK	Elements	Hosted / Backoffice	Webhooks
Full-text site search	Available	Delivery `GET /search`; Agent `site.search`	—	Hosted site search box	—
Site speed & Core Web Vitals monitor (`/seo/speed`) Measure your external storefront directly with Vercel Speed Insights, Cloudflare Web Analytics or Google Search Console.	Hosted only	—	—	`/seo/speed` (measures Kanorio-hosted pages via CrUX & PageSpeed Insights)	—
On-site promotional widgets (`/marketing/on-site/topbar`, modal, floating buttons) Model announcements as a custom Collection in `/data` and render your own banner or modal component in your frontend.	Hosted only	—	—	`/marketing/on-site/topbar`, `/marketing/on-site/modal`, `/marketing/on-site/floating` (injected into Kanorio-hosted DOM)	—
Visual theme, typography, color palette & section layout (`/editor` design surface) Page content (`sections[]`), headers, footer and `seo` metadata are exposed via Delivery API `/pages` and `/globals/*`, while visual styling is owned by your frontend codebase.	Hosted only	—	—	`/editor` visual site builder	—
Automatic OG image generation, `sitemap.xml`, `robots.txt` & JSON-LD output Read the `seo` object and `/api/v1/redirects` from the Delivery API and generate metadata, `sitemap.xml` and `robots.txt` in your Next.js / Astro routes.	Hosted only	Delivery `/pages/:slug` and `/collections/blog/items/:slug` return `seo` fields (`title`, `description`, `ogImage`, `canonicalUrl`, `noindex`)	—	Automatically served on Kanorio-hosted pages	—
First-party visitor & AI crawler traffic analytics (`/analytics`) Install your own analytics tracker on your external storefront; form submissions and orders still appear in Kanorio `/analytics` and `/console`.	Hosted only	Agent `analytics.*` reads traffic recorded on Kanorio-hosted pages	—	`/analytics`	—

Hosted-only features (when using an external storefront)

When you point visitor traffic to your own frontend (Next.js, Astro, etc.), these features only apply to Kanorio-hosted pages. Use the recommended alternatives below in your own codebase.

Site speed & Core Web Vitals monitor (`/seo/speed`)Hosted only

Hosted surface: /seo/speed (measures Kanorio-hosted pages via CrUX & PageSpeed Insights)

Measure your external storefront directly with Vercel Speed Insights, Cloudflare Web Analytics or Google Search Console.

On-site promotional widgets (`/marketing/on-site/topbar`, modal, floating buttons)Hosted only

Hosted surface: /marketing/on-site/topbar, /marketing/on-site/modal, /marketing/on-site/floating (injected into Kanorio-hosted DOM)

Model announcements as a custom Collection in `/data` and render your own banner or modal component in your frontend.

Visual theme, typography, color palette & section layout (`/editor` design surface)Hosted only

Hosted surface: /editor visual site builder

Page content (`sections[]`), headers, footer and `seo` metadata are exposed via Delivery API `/pages` and `/globals/*`, while visual styling is owned by your frontend codebase.

Automatic OG image generation, `sitemap.xml`, `robots.txt` & JSON-LD outputHosted only

Hosted surface: Automatically served on Kanorio-hosted pages

Read the `seo` object and `/api/v1/redirects` from the Delivery API and generate metadata, `sitemap.xml` and `robots.txt` in your Next.js / Astro routes.

First-party visitor & AI crawler traffic analytics (`/analytics`)Hosted only

Hosted surface: /analytics

Install your own analytics tracker on your external storefront; form submissions and orders still appear in Kanorio `/analytics` and `/console`.

Explicitly outside platform scope

Capabilities intentionally left to your own application backend so boundaries stay clear.

Custom end-user application roles (e.g. teacher / TA / branch manager in your own app)Not offered

Kanorio separates operational RBAC (site team), customer commercial entitlements (`Entitlement`), and plan entitlements. Fine-grained custom app roles (e.g. "teacher can only view students in class B") are not offered as a platform primitive; enforce them in your own application backend or an authorization service such as OpenFGA.