Which Etsy API permissions does ShopPilot request?
ShopPilot requests eight Etsy API scopes. Each one is listed below with exactly what it is used for, and the list is checkable against Etsy's own scope documentation.
listings_r
Read listing details and status for previews, editing, duplicate protection, draft review, registry history, and analytics.
listings_w
Create and update listings, upload seller-authorized images and digital files, and publish when you explicitly request it.
listings_d
Delete a seller-selected listing after a destructive confirmation.
shops_r
Read basic information about the connected shop, sections, and identity so actions target the intended seller shop.
shops_w
Create shop settings you explicitly ask for: copying shipping profiles, return policies, processing profiles and sections from one shop you have connected into another, so a newly opened shop does not have to be set up by hand. Used only on a shop you select, after you confirm exactly what will be created, and never to change or delete a setting that is already there.
transactions_r
Read paid receipts and transaction details for seller analytics and optional seller-requested fulfilment, including order and delivery information needed for that workflow.
transactions_w
Add a shipment tracking number to a paid order in your own shop, so the buyer is notified, and only for an order whose fulfilment you started in Shop Pilot. It is never used to change an order's price, contents, or status by any other means.
address_r
Read the delivery address on a paid order, solely to complete a fulfilment workflow you have requested.
Why does a listing tool need write access?
Creating a listing is a write operation, so a tool that creates listings cannot work with read-only access. listings_w is what lets ShopPilot create the draft; nothing is published until you ask for it.
What permissions does ShopPilot not request?
The current official scope set does not request cart, favorites, billing-write, or payment-write permissions. ShopPilot does not collect Etsy passwords or process buyer checkout payments.
How is a shop connected and disconnected?
- You review these permissions and accept the current Terms and Privacy Policy.
- Etsy displays its authorization screen.
- ShopPilot stores the returned tokens for your account and selected profile.
- You may disconnect in Account & Privacy; this deletes stored Etsy tokens and stops future Etsy API calls.
- You may separately revoke the grant in Etsy's connected-app settings.