Get an API key
1
Log in
2
Navigate to API Keys
Go to Settings → API Keys
3
Create key
Configure permissions and copy your key securely
Key types
Personal Keys
Access your individual orders and resources
Organization Keys
Access organization-owned resources
Available services
| Service | Description |
|---|---|
order | Create, read, update, delete orders |
account | Access account information |
inventory | Check product inventory |
Example requests
- cURL
- JavaScript
- Python
Error responses
401 Unauthorized
401 Unauthorized
403 Forbidden
403 Forbidden
Insufficient permissions for the requested action.Causes: Service not enabled, accessing other user’s resources
Best practices
Keep Secret
Never expose keys in client-side code
Environment Variables
Store keys in env vars, not code
Rotate Regularly
Create new keys and revoke old ones
Least Privilege
Only enable required services
Managing keys
- View: See all active keys, creation date, last used
- Revoke: Immediately disable a key (cannot be undone)
Organization API keys scope all requests to the organization’s context—orders, billing, and resources.