> ## Documentation Index
> Fetch the complete documentation index at: https://developers.appstle.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Partner Integration Framework overview

> How the Appstle Bundles Partner Integration Framework works — one handshake per merchant, a scoped API token, no API plan required, automatic revocation.

The Partner Integration Framework lets your product — a page builder, search tool, or review platform — connect to Appstle Bundles on behalf of many merchants. Instead of asking each merchant to create and paste an API key, your app completes a one-time handshake per store and receives a **scoped API token** for it.

## How a connection works

<Steps>
  <Step title="Appstle onboards your app once">
    You receive a **Partner ID** and **Partner Secret** used only for connection calls.
  </Step>

  <Step title="A merchant connects your app">
    Either from your product's UI, or from **Settings → Partner Connections** in their Appstle dashboard.
  </Step>

  <Step title="The merchant approves">
    Connections your app initiates stay pending until the merchant approves them in Appstle. Pending requests expire after 30 days.
  </Step>

  <Step title="Your app receives a scoped token">
    Appstle delivers a merchant-specific `apst_...` token to your callback. Send it as `X-API-Key` on Admin API calls — exactly like a regular API key.
  </Step>
</Steps>

When a merchant disconnects your app — or uninstalls Appstle — the token is revoked immediately.

## Why use it

* **No API plan required** — merchants are never billed for partner API usage
* **One isolated token per merchant** — no shared credentials, no manual key exchange, individually revocable
* **Merchant-controlled** — merchants see, approve, and disconnect partners from their own dashboard
* **Automatic cleanup** — access is revoked the moment a merchant disconnects or uninstalls

## Access levels

Your app's permission level is set during onboarding:

| Permission       | What your app can do                                                     |
| ---------------- | ------------------------------------------------------------------------ |
| **Read Only**    | View bundle rules, Build-a-Box configurations, and discount rules        |
| **Read & Write** | Everything above, plus write operations as the Bundles Admin API expands |

The Bundles Admin API is read-focused today, so most partners run **Read Only**.

## Connection modes

| Mode                          | Use it when                                | Your app receives                                   |
| ----------------------------- | ------------------------------------------ | --------------------------------------------------- |
| **Nonce Handshake** (default) | Your app needs to call Appstle's Admin API | A merchant-scoped `apst_...` API token              |
| **Simple Token Exchange**     | Appstle should push data to *your* API     | No Appstle token — Appstle stores a token you issue |

## Get started

Email [support@appstle.com](mailto:support@appstle.com) with your company name, product description, base URL, and contact email to get onboarded. Then follow the [Partner integration guide](/bundles/partner-integration) for the full implementation — endpoints, handshake, callbacks, and testing.