API keys: your catalogue, anywhere
Read-only keys that let your own website or app pull your live catalogue from CyberShop.
What it is
An API key lets software you control fetch your published listings (names, prices, photos, links) straight from CyberShop — for your own website, a partner app, or a spreadsheet pipeline. Keys are read-only: they can never change your store, see buyers, or touch money.
Create and use a key
- Dashboard → API keys → name it and create.
- Copy the key immediately — it is shown once and stored only as a hash.
- Send it as a header: Authorization: Bearer csk_… to GET /api/public/catalog.
- Revoke any key the moment it leaks or a project ends; revocation is instant.
Treat a key like a password for your catalogue: never paste it into public code or screenshots. Anyone holding it can read your published catalogue until you revoke it.
Put it into practice
This guide is about a real place in the app — go straight there.