## How it works

The shop's API Keys & Integration page holds credentials, shop and merchant identifiers, and the integration snippets for checkout.

## Implementation

Create a labeled secret key and store it when it is shown; copy the publishable key only for the permitted customer-side flow. Use the exact shop ID in server calls. Choose Hosted Checkout, Iframe Embed or a supported custom redirect flow. For an iframe, allow the exact parent origin and review wallet requirements. Rotate keys with a replacement deployment before revocation.

## In this area

- Create a secret key
- Copy the shop's IDs
- Pick an integration

## Controls and values

| Control | Values and related labels |
| --- | --- |
| **Iframe Embed** | `Allowed iframe origins` |

## Related guides

- [API keys](/docs/general/authentication/)
- [Shop settings](/docs/dashboard/shop/settings/)
- [Hosted checkout](/docs/payment-api/hosted-checkout/)
- [Embedded & own checkout](/docs/payment-api/embedded-checkout/)