Create and manage API keys to connect your store to external apps and tools.
Last updated: 2026-09-09
🔧 Creating and Managing API Keys
1
From the sidebar, open Store Settings, then choose Integration Keys.
2
You'll find a list of all active keys — in the store we tested there were two keys named "MCP codex" and "Claude MCP", both with ACTIVE status.
📍 Two active API keys with a masked token (tt_...), creation date, last used date, and permission count
3
Each key displays: a partially masked token (such as tt_6ef36...) with a copy button, creation date, last used date, and the number of permissions granted to it (8 permissions in the example) with tags showing the allowed sections (CUSTOMERS, CATEGORIES, ANALYTICS...).
4
Each key has 3 buttons: Revoke (disable the key immediately), Regenerate (generate a new token and invalidate the old one), and View Details.
5
Below the list, the Need help getting started? section has ready-made links: an authentication guide, rate limits, code examples, and a link to the full API documentation.
⚠️ Disclosure note: We did not click "Regenerate" or "Revoke" on a live key, to avoid breaking any real, active connection on the test account — these steps are described based on the text shown in the interface only.
💡 There are filters at the top of the list (All / Active / Revoked) and a search box by name, prefix, or scope — useful if you have a large number of keys for different applications.
❓ Frequently Asked Questions
Can I see the full key value after creating it?
The key appeared to us partially masked in the list (tt_6ef36...) — the full value is most likely shown only once, at the moment of initial creation, so it's important to save it immediately somewhere secure.
If I revoke an API key, does the app using it stop immediately?
Based on the existence of a separate (Revoke) button, any future request using the revoked key will most likely be rejected immediately — but this wasn't tested directly in this session.
