Issue a narrowed key
Trade your key for one limited to a single website — what an installed app holds.
قراءة 2 دقائق
All plans
POST
/api/v1/me/keys
This is the flow behind "which website is this site?" in the WordPress plugin and the Shopify app. They list your websites, you pick one, and the app trades your key for one that reaches that website alone.
ابدأ من هنا
Your own key is untouched — this issues a narrower one beside it. The narrow key is what a site keeps, so if that site is ever compromised it reaches one website and no others.
You need to be an admin or owner of the website. A narrowed key needs no website_id on later requests: it has already named one.
انتبه
The new secret is in this reply and nowhere else. It is never shown again.