How a connection works
1
Appstle onboards your app once
You receive a Partner ID and Partner Secret used only for connection calls.
2
A merchant connects your app
Either from your product’s UI, or from Settings → Partner Connections in their Appstle dashboard.
3
The merchant approves
Connections your app initiates stay pending until the merchant approves them in Appstle. Pending requests expire after 30 days.
4
Your app receives a scoped token
Appstle delivers a merchant-specific
apst_... token to your callback. Send it as X-API-Key on Admin API calls — exactly like a regular API key.Why use it
- No API plan required — merchants are never billed for partner API usage
- One isolated token per merchant — no shared credentials, no manual key exchange, individually revocable
- Merchant-controlled — merchants see, approve, and disconnect partners from their own dashboard
- Automatic cleanup — access is revoked the moment a merchant disconnects or uninstalls