---
title: API keys and partner keys
description: Every call signs in with a key and its secret. Sellers use a storefront API key; resellers can also have one partner key for every storefront.
url: "https://shop.anypress.io/docs/api-keys-and-partner-keys/"
updated: "2026-10-24"
category: Automation
---

# API keys and partner keys

Every call to the AnyPress API signs in with a key and its secret, using Basic auth. It works the same way in every tool.

|  | API key | Partner key |
| --- | --- | --- |
| Who has it | Every seller and reseller storefront | Resellers, for the whole account |
| Where you get it | **API keys** at [app.anypress.io](https://app.anypress.io) | From us. Email support@anypress.io |
| Works on | That one storefront's sites | Every storefront in the account |
| Each call needs | Nothing extra | Which storefront it's for, as `?productId=…` |
| Can also | Manage sites, domains and webhooks | Add storefronts, share starting sites, read usage |

## Keep the secret safe

- The secret is shown only once, when the key is made. Paste it straight into your tool's saved logins (an n8n credential, a Make connection, a Zapier field), never into a shared document.
- To replace a key, rotate it with a grace period. The old key keeps working for up to 30 days while you paste the new one in.
- A wrong key or secret is answered with **403**.

## Using a partner key

Add `?productId=<storefront id>` to every site call, for example `POST /v1/tenants?productId=…`. Without it, the answer is 400. `GET /v1/products` lists your storefronts and their ids.