1. Integration key

An integration key is a long-lived secret that is exchanged for a short-lived access token.

Create a key

1. Open Settings → Company.

   

2. Go to the Integration keys section.

   

3. Click New key and enter a name — for example, online-store or 1C exchange.

   

   

4. Copy the key from the list.

   

Together with the key, its role is created — it already includes two permissions: “View and search products in the catalog” and “Ability to view the customer list”.

Which methods are available to the key — see the list of routes; what each role access toggle changes — see key role permissions. If a method responded with 403, see understanding 403 and 404.

The key requires the same protection as a password

The key grants access to all company data within the granted permissions. It must not end up in front-end code, in the repository or in build variables available to contractors. A compromised key is handled by deleting it and issuing a new one.

Next: first request.