Developer & API

This chapter covers Developer & API. The pages are listed in the order you'd usually need them: how it works first, then the tasks, then the reference pages.

To…	Go to…
What lives under Settings → Developer — tokens, AI assistant access, connected apps, sessions, webhooks and two-factor authentication — and which one to reach for	Developer settings overview
Mint a scoped API token for a script, integration, or third-party tool, and capture its value the one time it's shown	Create a personal access token
Edit scopes and restrictions, rotate a secret without re-pointing your integrations, watch a token's traffic, and revoke it when it's done	Manage personal access tokens
The full catalog of API scopes, what each one opens, and how to read the errors you get when a token is missing one	API scopes reference
Tell a missing token scope apart from a missing account permission, and fix the right one	Fix a 403 from your API token
Link Claude Desktop, Cursor, or Claude Code to your SKU.io account over MCP, and manage the connection token afterwards	Connect an AI assistant
Have SKU.io POST a signed payload to your endpoint when an order, purchase order, product, customer, or stock level changes — and verify it's genuine	Subscribe to webhooks
Read the delivery log, tell a retry from a rate-limit drop, understand when SKU.io disables a subscription, and pause, resume, or delete one	Monitor webhook deliveries
Register a third-party app so it can ask your users for access through OAuth 2.0, and hand its developer the Client ID, Client Secret, and webhook signing secret	Register an OAuth application
Edit a registered OAuth application's name, redirect URIs, and revocation webhook, rotate its webhook signing secret, and revoke it when an integration is retired	Manage OAuth applications
See which third-party apps you've authorized, what permissions they hold, exactly what they've been calling, and how to revoke access	Review connected apps