Support
Store API security and key rotation
Knowledgebase
Use a separate key per shop; a PrestaShop webservice key, OpenCart API user and WooCommerce REST key are not interchangeable. Never send keys in plain email or Slack. When staff leave, revoke the key and save a new one in the panel. Grant only the resources you need (catalog, stock, orders). If you use an IP allowlist, add Ara Sistem egress or tests time out. HTTPS is mandatory.