API keys
Reviewed on 5 October 2026
On this page
An API key lets another application, such as your tracking sheet, Zapier, Make or your own software, read your store's data. Only the owner and administration can create them.
Create a key
- 1. In Integrations, click New key.
- 2. Type a Name that reminds you where you use it.
- 3. Tick the Permissions it needs.
- 4. Click Create key.
- 5. Copy the key with Copy, save it and click I've saved it.
Rotate a key
Rotate a key when you want to change it without cutting your tools. The previous one keeps working while you put in the new one.
- 1. Open the key's menu in the list.
- 2. Click Rotate.
- 3. Copy the new key and put it in your tools.
What happens next
The list shows each key with its name, its permissions, who created it and its last use. After rotating it, the previous one appears as Replaced and keeps working for 24 hours.
Keep in mind
- The full key is only shown when created. If you lose it, rotate it.
- Give only the permissions needed. With Read sales, refunds, subscriptions, contacts and invoices can be looked up. With Write contacts can also be saved and webhooks managed.
- If a key leaks, click Revoke. It stops working at once and the Zapier and Make webhooks created with it are deleted.
Was this helpful?
Need to talk to us?
If you didn't find what you were looking for, write to us. We reply within two working days.