Credentials and environments#
Configure credentials for your Visualizer SDK storefront and, if needed, the Product Import API. Reading public documentation does not create a credential or grant access to a shop.
Which credential belongs where?#
| Integration | Credential | Where it belongs |
|---|---|---|
| Storefront SDK | Shop ID and Publishable Key | Storefront SDK script attributes |
| Product Import API | Client ID and Client Secret | Your backend or a secure server-side job |
A Publishable Key is intended for the browser. A Client Secret must stay on your server. Never paste them into a theme, public Markdown, client bundle or support screenshot.
Obtain and configure credentials#
Open the merchant Dashboard, select the correct shop and review SDK Integration and Settings. Follow onboarding instructions for Client ID and Client Secret.
Configure Allowed Origins (CORS)#
Before testing or publishing the SDK, open Dashboard → Settings for the correct shop and find Allowed Origins (CORS).
- Enter the origins of the storefronts that will load the SDK, separated by commas. For example:
https://example.com, https://www.example.com, https://shop.example.com. - Use the protocol and hostname, plus the port when applicable, without a page path, query string or fragment. Add your preview or staging origin too if you test the SDK there; use
http://localhost:3000only when that is your actual local test origin. - Click Save, then reload the storefront and test the SDK again.
Check the actual URL customers visit: https://example.com and https://www.example.com are different origins. A successful local or preview test does not establish that the published origin is configured.
Replace example values#
Examples use placeholders such as <SHOP_ID>, <PUBLISHABLE_KEY> and <YOUR_CLIENT_SECRET>. Replace them only in the intended environment. HTML examples may encode angle brackets as < and >; replace the entire placeholder, including that encoding.
SDK and Product Import environments#
The browser loads https://sdk.ideal.house/sdk.js with the Shop ID and Publishable Key from the same shop. The Product Import API continues to use https://sdkapi.ideal.house, with its documented server-side authentication.
Configure your preview and production storefront origins separately as described above. Use prepared test products before publishing, then complete the launch checklist.