Introduced Cart locking | HTTP API | commercetools Composable Commerce

Introduced Cart locking

16 January 2026

Composable Commerce

HTTP API

Enhancement

CartsGraphQL

We have introduced Cart locking to enable your customer support agents to view and edit Carts without the risk of conflicting edits. Unlike Cart freezing, which prevents price-affecting changes but allows other updates, locking prevents all updates to a Cart.

You can lock and unlock Carts using the new lockCart and unlockCart update actions. While a Cart is locked, the lock field records when and which API Client locked the Cart. Only API Clients with the manage_locked_carts:{projectKey} OAuth scope can lock, unlock, or update a locked Cart.

Changes:

[API] Added the CartLock type.
[API] Added lockCart and unlockCart update actions.
[API] Added the lock field to the Cart object.
[API] Added the manage_locked_carts:{projectKey} OAuth scope.
[GraphQL API] Added CartLock, LockCart, and UnlockCart types.
[GraphQL API] Updated the CartUpdateAction input to include lockCart and unlockCart.
[GraphQL API] Added the lock field to the Cart type.

The following changes were introduced in terms of GraphQL SDL:

extend type Cart {
  lock: CartLock
}

extend input CartUpdateAction {
  lockCart: LockCart
  unlockCart: UnlockCart
}

"Prevents edits on a Cart unless the caller has the `manage_locked_carts` OAuth scope."
type CartLock {
  createdAt: DateTime!
  clientId: String!
}

input LockCart {
  dummy: String
}

input UnlockCart {
  dummy: String
}