Developer & API
Create and manage the keys that give programmatic access to your store: MCP keys for connecting Claude and server API keys for sending orders.
The Developer screen holds the keys that let software talk to your store. There are two kinds: MCP keys and server API keys. Open Settings → Workspace → Developer.
Every key here is shown only once, when you create it. Copy it then and store it somewhere safe. Keep keys secret and never put them in code that runs in a browser.
MCP keys
MCP keys connect an AI assistant to your store, so you can ask questions about your data in natural language. See the MCP Server guide for setup instructions.
To create one:
- Enter a Label (for example "Client read-only").
- Choose a Scope:
- Read + Write: full access. Use this for yourself.
- Read only: can read data but not change it. Use this for clients.
- Click Create key.
The new key appears once in a highlighted box. Copy it, then click I've copied it. Each existing key shows its label, scope, a short prefix, when it was created, and when it was last used. You can hold up to five keys. To remove one, click Revoke and confirm. Any integration using that key loses access immediately.
Server API keys
Server API keys let your own server send orders to Zappush. Use these from server-side code, never from a web page or app that runs on a shopper's device.
To create one:
- Click New key.
- Enter a Label (for example "production server").
- The key is created with the orders:write scope, which allows sending orders.
- Click Create key.
As with MCP keys, the new key is shown once in a highlighted box. Copy it and click I've copied it. Each key in the list shows its label, a short prefix, when it was created, and when it was last used. A revoked key is marked revoked. To revoke a key, click Revoke and confirm; any service using it stops working right away.
What these power
Both key types power programmatic and SDK access to your store: MCP keys for connecting Claude, server API keys for sending orders from your backend. For how to use a server key in code, see the SDK reference.
Devices & sessions
See every device signed in to your Zappush account, review where each one is, and sign out any device or all of them at once.
Privacy mode
A compliance option that stores your customers' contact details in an unreadable form, for merchants who cannot have raw customer data held by a third party.