Authentication

To use the Seller Assistant API, send your API key in the X-Api-Key header of each request. This page tells you how to create, send, and manage your API key.

Create an API key

Open the API Keys page

Go to the API Keys page in your account settings.

Generate an API key

Click Generate API Key. Copy the key and keep it in a safe location. Seller Assistant shows the key one time only. If you lose the key, generate a new key.

Send the API key in the header

Send the API key in the X-Api-Key header of each request.

Important: Do not put the API key in the URL. The server rejects the api_key and api_token query parameters. If a request sends the key only in the URL, the server returns 403 Access Denied.

Use the API key in no-code tools

n8n: Use the Seller Assistant node. Or use an HTTP Request node with Header Auth. Set the name to X-Api-Key and the value to your API key.

Make, Zapier, and other HTTP tools: Add a header with the name X-Api-Key and your API key as the value. Do not add the key to the URL.

Security best practices

Keep your API key secret: Do not share your API key. Treat it like a password.

Send the key only in the header: A key in a URL can go into browser history, proxy logs, and server logs.

Rotate your API key: Generate a new key at regular intervals and delete the old key.

Use HTTPS: Always send API requests over HTTPS.

Limit exposure: Do not put your API key in public repositories, client-side code, or other unsafe locations.

Manage your API keys

Go to the API Keys page to generate new keys and delete keys that you do not use.

Replace an API key

If you think that someone else has your API key, or if you want to rotate it, replace the key:

Open the API Keys page

Go to the API Keys page in your account settings.

Generate a new API key

Click Generate API Key. Copy the new key and keep it in a safe location.

Update your integrations

Put the new key in all tools and scripts that use the old key.

Delete the old API key

Find the old key and click Delete. The old key stops working immediately.

Delete an API key

Open the API Keys page

Go to the API Keys page in your account settings.

Delete the API key

Find the key and click Delete. The key stops working immediately.

Authentication errors

If the API key is missing, not correct, or sent only in the URL, the server returns 403 Access Denied. Make sure that the request has the X-Api-Key header and that the key is valid. Example response:

{
  "code": "access_denied",
  "message": "API Token is invalid",
  "trace_id": "4a7d3782-2ab2-435f-8475-62b7f4a9394c"
}

Create an API key#

Send the API key in the header#

Use the API key in no-code tools#

Security best practices#

Manage your API keys#

Replace an API key#

Delete an API key#

Authentication errors#

Create an API key

Send the API key in the header

Use the API key in no-code tools

Security best practices

Manage your API keys

Replace an API key

Delete an API key

Authentication errors