Confused about using API keys securely for product & order data

Ask the community
, , ,
1

I’m having trouble with
Hi everyone,

I’m trying to set up a secure connection between my Wix store and a small external dashboard that I maintain for tracking construction material pricing

Working in
Wix Editor

Site link
website URL is: https://cementsprice.com

What I’m trying to do
I followed the documentation to create API keys, but I’m still confused about a few things:

  • I generated a key with access to Orders and Products, but when I tested in Postman I sometimes get 403 errors even though the permissions look correct.

  • I’m not sure what the best practice is for storing the keys. Right now I’m keeping them in environment variables on the server, but I read that Wix recommends extra security steps if multiple people on a team need access.

  • The docs mention rate limits, but it isn’t clear if all requests under one API key count together. For example, if 5 different people are using the same key, does it throttle all of them as one?

  • I also noticed that sometimes the keys stop working and I have to regenerate. Is there a way to refresh tokens automatically, or is manual regeneration the only option?

  • Lastly, I tried pulling product lists into the backend using wix-fetch, but the response was incomplete (only part of the product set). Not sure if this is a limit or a mistake on my side.

  • I’ve already:
    Created multiple keys with different scopes (Orders, Products, Events)
    Tested in Postman with both GET and POST requests
    Tried limiting IPs for security
    Looked through the official docs

Still not confident I’m setting this up correctly.

Extra context

Has anyone here successfully implemented Wix API keys for a live data use case? I’d really appreciate advice on:

  1. How to store and share keys securely across a small team

  2. Whether there’s a recommended workflow for handling expired keys

  3. Best practices for rate limits and avoiding partial responses

Thanks in advance! I’m hoping someone who’s done this before can share a real-world setup.

2

Hi @Yaddeve_Pandy, I’d love to help but I have a clarifying question:

  • When you mention “Wix API Keys” are you referring to Wix Account/Site Level APIs to directly access your site data from Wix Stores such as your orders, products, and events?
1 Like