Seller API & stores
Open an app and choose Seller API & stores. The page has two parts.
Seller API tokens
Section titled “Seller API tokens”A token lets your own code call the Seller API without signing in to the panel.
- Choose New token.
- Name it after what will use it (for example discord-bot). The name appears in the audit log as
api-token:<name>. - Tick the areas it may use: licenses, users, logins, subscriptions, variables, files, audit.
- Copy the token from API token — shown once. It starts with
eon_sk_. Only a hash is stored.
A token reaches only this app. Revoke a token to stop it at once. The list shows when each token was last used.
Who can create tokens
Section titled “Who can create tokens”The page is only in the sidebar for owners and for managers with App settings: All on the app. Listing, creating and revoking tokens all need that level. On top of it, you can only tick areas where you yourself have All, since a token can’t hold more than the person who makes it.
Only an owner can grant All. A manager on Own or Team, or with App settings None or Some, can’t make tokens. If they need one, an owner makes it and hands it over.
Giving a token to someone
Section titled “Giving a token to someone”A token isn’t tied to the person who made it or the person using it:
- It has All on its areas for the whole app. It doesn’t follow the holder’s own permissions. A
manager limited to License keys: Own in the panel can see and revoke every key in the app through
a token with
licenses. Tick only what you’re comfortable with app-wide. - The audit log shows the token, not the person, as
api-token:<name>. Name each token after its holder and use, for example rahul-discord-bot. - Keys it makes belong to the token. They don’t appear as the holder’s keys under Own, and their sales are booked to the token, not counted toward that person’s sales or commission.
- It outlives its holder. Disabling or deleting a manager doesn’t revoke tokens they made or were given. Tokens end only when they are revoked or the app is deleted, so revoke them when someone leaves.
Store products
Section titled “Store products”A store product delivers keys automatically when someone buys on Sell.App, Sellix, or your own checkout. Adding one needs App settings: All and License keys: All. Choose Add product and set:
| Field | Notes |
|---|---|
| Provider | Sell.App, Sellix or Generic |
| Name | Shown in the audit log as store:<name> |
| Tier and duration | What each key grants |
| HWID resets | Per key |
| Max quantity | Largest order it will fill (default 10, up to 100) |
| Key mask | Optional |
| Webhook secret | Sell.App and Sellix: paste the secret from the store. Generic: generated and shown once |
The panel then shows the webhook URL, https://panel.eonauth.fyi/hooks/store/store_…. Paste it into
the store’s dynamic delivery settings for that product.
See Store webhooks for how each provider is set up and how the generic signature works.