API Keys
Create, scope, and revoke API keys that let your own scripts and tools like Zapier work with your store's data.
An API key lets your own scripts, spreadsheets, and tools like Zapier read your store's orders, products, customers, and reports — and, if you allow it, add and edit products and categories. Each key only has the permissions you choose when you create it.
Who can manage keys
Only the store owner can create or revoke API keys. Collaborators can open the page and see the list of keys, but not create or revoke them.
Keys belong to the store, not to the person who created them.
Creating a key
Name the key
Under Create a key, give it a Name (up to 100 characters) that tells you what it's for, like "Zapier - new orders to Google Sheets". The name appears in your audit history next to any change the key makes.
Choose permissions
Tick only what this key needs. You must choose at least one. See Permissions below.
Choose when it expires
Under Expires, pick Never (the default), In 30 days, In 90 days, or In 1 year.
Create and copy it
Click Create key. Under Copy your new key, click Copy, store the key somewhere safe like a password manager or your tool's secret settings, then click I've saved it.
This is the only time the full key is shown. If you lose it, revoke it and create a new one.
Keys start with e2c_sk_. In the Your keys list you'll only ever see the first few characters, plus the key's permissions, and when it was created, last used, and expires.
Permissions
Permissions are split into two groups.
Read — view your store's data. Can't change anything.
| Permission | What it allows |
|---|---|
| Orders | Orders, items, shipping, and tracking. Includes buyer name and shipping address. |
| Products | Physical and digital products: variants, stock, prices, and their reviews. |
| Services | Services: pricing, service type, location, and their reviews. |
| Events | Events: dates, venue, ticket types with capacity and sales, and their reviews. |
| Customers (Personal data) | Customer names, emails, and phone numbers — also adds email and phone to orders. |
| Reports | Sales, revenue trend, order status, top products, and traffic. |
Add & edit — create and change listings. Nothing can be deleted.
| Permission | What it allows |
|---|---|
| Add & edit categories | Create categories and rename, show, or hide them. Cannot delete. |
| Add & edit products | Create products and change their details, prices, stock, and visibility. Cannot delete. |
Add & edit permissions don't include reading. If a tool needs to look up products before changing them, give its key Products as well as Add & edit products.
Permissions can't be changed after a key is created. To change them, create a new key with the right permissions and revoke the old one.
Revoking a key
If a key leaks, or you stop using a tool, revoke its key:
- Go to Settings → API keys.
- Click Revoke next to the key.
- Confirm with Yes, revoke.
Anything using the key stops working immediately. Revoking can't be undone.
Limits
| Limit | Value |
|---|---|
| Active keys per store | 10 (expired and revoked keys don't count) |
| Key name | Up to 100 characters |
| Requests | 60 per minute, per key |
When you reach 10 active keys you'll see "You can have up to 10 active keys. Revoke one to create another."
Good to know
Connect an AI Assistant
Connect Claude, ChatGPT, Gemini, or any MCP-compatible assistant to your store. Ask about sales and orders, let it build and edit your store, or have it fulfil orders and answer customers.
REST API Reference
Endpoints, authentication, pagination, rate limits, and errors for the E2C Store REST API.