What access tokens are for
An access token (also called an API key) lets your own software, a developer, or a third-party tool read data from your store through the Storeep API. Each token has its own permissions, data window, and expiry date, so you can give each tool exactly what it needs and remove it at any time without sharing your password.
Open Settings > Access tokens. The View documentation button opens the API reference, with the endpoints, how to send the token, and the request limits. Share that page with your developer.
Want to connect an AI assistant like Claude or ChatGPT instead? That does not use access tokens. See Connecting an AI assistant.
Creating a token
Click Create new token, fill in the form, and click Create.
- Token name: a label to recognise it in your list, for example "Accounting sync". Only you see it.
- Permissions: tick at least one:
- Read products: product listings, details, variants, and inventory.
- Read orders: order history, details, statuses, and line items.
- Read webhooks: view webhook configurations and delivery logs.
- Manage webhooks: create, update, and delete webhook subscriptions through the API.
- Data access: how far back the token can read.
- Last 24 hours: only data created in the last 24 hours. The most secure option, good for live syncs.
- Set start date: only data created on or after a date you pick in Data access start date.
- All time: all your data, with no date limit.
- Expiration: Never expires, or Set expiration date to pick a date up to one year ahead. After that date the token stops working by itself.
Copy your token now
After you click Create, the window shows Your access token with a copy button. This token is only shown once. Copy it and keep it somewhere safe, like a password manager. Storeep cannot show it again. If you lose it, delete the token and create a new one.
Treat it like a password. Never put it in website code, public repositories, screenshots, or chat messages.
The tokens list
- Name, with the date it was created.
- Permissions: for example Products read or Orders read.
- Data access: Last 24 hours, All data, or From a date.
- Expiration: a date, or Never.
- Last used: when a tool last used the token, or Never.
There is a maximum number of tokens per store. When you reach it, the Create new token button disappears until you delete one.
Editing a token
Click a token to change its name, permissions, data access, or expiry. The token value stays the same, so the tool using it keeps working with the new rules.
Deleting a token
Tick one or more tokens and choose Delete tokens, or use the trash button on a row. The token stops working immediately, and any tool using it gets an error.
Tips
- Give each tool its own token, so you can remove one without breaking the others.
- Choose the smallest data window that works.
- Set an expiry date for freelancers and one-time jobs.
- A token that shows Never in Last used for a long time is probably not needed. Delete it.
- To have Storeep push order events to your server instead of your server asking, use webhooks.