Working with API keys

A partner wants their app to sign customers in with comrce Hub? You set that up in API Keys. Each partner app gets an API client: the registration that lets it sign comrce Hub customers in. Here comrce decides which customer data the app may request, not the partner. You can narrow or remove a client at any time.

The page at a glance

• The list of API clients: every client with its ID, name and redirect addresses. Search, edit and delete clients here.
• Create or edit an API client: the form for name, scopes, switches and addresses. It shows the secret once.

What you can do here

• Register a partner app and hand over its client ID and secret: API clients and third-party sign-in. The whole route with a new partner: Add a new partner and their offer to the Marketplace.
• Choose which customer data a partner may request: The scope picker.
• Let a partner’s server act without a signed-in user: Client credentials.
• Narrow or remove a client and end its sessions: Editing a client.
• Find a client by name or ID: Find a client.

Concepts

• Staff roles and what they can do: why only one role reaches this area.

Who can use this

Only staff with the Super Admin role see and change API clients. Everyone else sees no sidebar entry. A direct link shows them You do not have permission to view this page..

Customers never see this area. They only meet a client’s name on the consent page, when a partner app sends them to comrce Hub.