API keys

An API key lets a tool, such as the Sworen theme CLI, work with your store without your password. A staff member creates one by approving the connection in the admin while signed in.

See who has access

Go to Settings → API keys. For each key you see:

• the computer or tool it was created for;
• the staff member who approved it;
• what it can do (for the theme CLI: read and edit theme files);
• when it was last used;
• whether it is active or revoked.

A key never gets more access than the person who approved it.

Revoke a key

Click Revoke next to it and confirm. That computer loses access immediately; whoever uses it has to connect again. Revoked keys stay in the list so you keep the history.

Only people can manage keys

Creating, listing and revoking keys needs a staff member signed in to the admin. An API key can never create or revoke other keys. Seeing and revoking keys needs the Manage settings permission.