Developers, API keys and webhooks
Create keys for your own code, and get told when something happens in your store.
- Who can do this
- Owner
- Plan availability
- Compare current packages
- Last checked
- September 20, 2026
What this does
Lets your own code read and write parts of your store, and pushes events to a URL you control.
Before you start
- Owner permissions.
- Somewhere for webhooks to arrive, reachable over https.
Steps
- Open Developers.
- Create a key. It is shown once, at the moment it is created, and never again — copy it then.
- To receive events, add a webhook: the URL, and which events you want.
- Torva signs every webhook so you can verify it came from us.
What happens next
A key you lose cannot be recovered; create another and the old one stops working, which is also how you revoke one.
Common problems
I lost my key. Create a new one. That replaces the old.
My webhook is not arriving. It must be https and must answer quickly. Check the delivery attempts listed against the webhook.
I am getting duplicate events. Webhooks are delivered at least once, so make your handler idempotent on the event id.
Still stuck?
Ask Torva from inside your account. It knows everything in this article and can also see what your own store is currently doing, so it can answer for your situation rather than in general.