Etsy
Connect Etsy to manage listings and inventory, publish products, process orders, and handle payments for your shop.
You end up pasting your Etsy app's Keystring (the OAuth client id) and its Shared Secret from the Etsy Developer Portal into PopMCP.
App review before this connector works
Which gate you hit depends on app type. Etsy's docs say Seller Apps are approved automatically for eligible sellers, but a Personal App "goes through a deeper review process than Seller Apps", and serving sellers at production scale needs a separately reviewed Commercial Access upgrade.
- Typical wait
- Seller App: Etsy states eligible sellers are "approved within minutes, with no manual review queue". Personal App and Commercial Access: Etsy publishes no figure and says only that "Commercial Access requests are reviewed manually. Review time may vary depending on your proposed use case." Developers in Etsy's own community forums report waits of several days to several weeks, with 20+ days per attempt not unusual.
- Cost
- Free. Etsy charges nothing for registration, review, or the Commercial Access upgrade.
- Blocked until approved
- Until the app is approved the keystring is inactive and every request fails, so no OAuth consent screen, no listings, orders, inventory, or shop data. An approved Seller App is still scoped to your own shop only. A Personal App works for other sellers at limited scale; serving sellers at production scale requires the Commercial Access upgrade.
- Works meanwhile
- If you are an active Etsy seller in good standing, register a Seller App: eligible sellers are approved within minutes with no manual review queue, and that key works immediately against your own shop. Build and test the entire integration on it while the Personal App or Commercial Access request is pending.
Where to apply: etsy.com/developers > 'Create a seller app' or 'Create a personal app'. For the upgrade, go to the same portal, open 'Apps You've Made', and click 'Request Commercial Access'.
- Applying with a vague or generic use case is the main cause of rejection and of long silences; Etsy reviews Commercial Access against your proposed use case, so describe exactly which endpoints you call and why.
- Applications are frequently left in 'Pending Approval' with no notification. Email the API help team rather than re-submitting, as duplicate apps slow things further.
- A Seller App cannot be converted into a commercial one. If you build on a Seller App key intending to sell the tool, you have to start a fresh Personal App review.
- Your Etsy shop or account must be in good standing; a suspended or policy-flagged account fails the Seller App eligibility check instantly.
- The old v2 API keys do not carry over; v3 requires a new registration and OAuth 2.0 with PKCE.
- Setup time
- 10 min, plus Etsy's app review
- Auth
- OAuth authorization
- API base URL
- https://api.etsy.com/v3
- Rate limits
- Etsy sets per-app Queries Per Second and Queries Per Day limits on a rolling 24-hour window, visible in the Developer Portal. Going over either returns 429 with a retry-after header.
Before you begin
- An Etsy account signed in to etsy.com
- An Etsy shop if you register a seller app, since seller apps only reach your own shop
- Acceptance of the Etsy API Terms of use
- Etsy approval. Every app is reviewed before its keystring goes live. Seller apps get a light review. Personal and commercial apps get a deeper one.
Get your credentials
Open the Etsy Developer Portal and pick an app type
Sign in at etsy.com/developers to land on the Dashboard. Click Get started under Create a seller app if the connection only touches your own shop, or under Create a personal app if it needs to reach beyond it.
Dashboard
Register an app to get an API key for the Etsy Open API v3.
The Developer Portal Dashboard. A seller app is the fastest route when PopMCP only needs your own shop.
Register the app
Fill in what you are building and how you will use the API, then tick the box accepting the API Terms of use. Name the app PopMCP and click Register to submit it for review. The seller form sits at etsy.com/developers/register-seller-app and the personal one at etsy.com/developers/register.
Register a seller app
Tell us about the app you are building.
Callback URLs can be added here or edited later from the app's page.
Wait for the app to be approved
Return to the Dashboard and check the app's row. Wait until its status reads Approved.
Your Apps
Manage the apps registered to this Etsy account.
| App name | Type | Status | Keystring | Registered |
|---|---|---|---|---|
| PopMCPMCP connector | Seller app | Approved | 1aa2bb33****6fff | Mar 4, 2026 |
| Stock sync testScratch app | Seller app | Pending review | Not issued | Mar 2, 2026 |
Calls made before the row reads Approved come back 403.
Copy the keystring and reveal the shared secret
Open the approved app from Your Apps and copy the Keystring. Click the visibility icon next to Shared Secret, then copy that value too.
PopMCP
Seller app, approved Mar 4, 2026.
- Keystring
- 1aa2bb33****6fff
- Shared Secret
- ••••••••••
- Status
- Approved
Etsy v3 sends both values in one header: x-api-key: <keystring>:<shared_secret>.
Register PopMCP's callback URL, then paste both values
On the app's Callback URLs tab, add the callback URL PopMCP prints on its Etsy connect screen, character for character. Paste the keystring into API Key (keystring) and the secret into Shared Secret in PopMCP, then click connect.
Connect in PopMCP
Open your workspace, choose Etsy in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| Auth typepreset | Create an app at etsy.com/developers/your-apps. Etsy uses PKCE, so no client secret is sent during sign-in. Your Etsy login stays on Etsy's side. |
| API Key (keystring)text | Your app's "Keystring" from etsy.com/developers/your-apps. This is the OAuth client id. |
| Shared Secretsecret | Your app's Shared Secret (same page as the keystring). Etsy requires it in the x-api-key header on every request. Stored encrypted; used server-side only.Encrypted with AES-256-GCM on save and never shown again. |
https://app.popmcp.com/api/providers/etsy/callbackAdd this exact URL to your Etsy app's "Callback URL(s)" (etsy.com/developers/your-apps → your app). It must match exactly, or Etsy rejects the authorization.
PopMCP verifies the credential against Etsy immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Permissions PopMCP requests
These are the scopes sent to Etsy at authorization time.
| Scope | Why PopMCP asks for it |
|---|---|
| shops_r | Read shop details, sections and policies. |
| shops_w | Update shop settings and shop sections. |
| listings_r | Read listings, variations and inventory levels. |
| listings_w | Create and update listings, images and inventory. |
| listings_d | Delete listings that PopMCP created or that you retire. |
| transactions_r | Read receipts, orders and transactions. |
| transactions_w | Update orders, for example marking a receipt shipped. |
| address_r | Read buyer shipping addresses on a receipt so fulfilment tools work. |
| email_r | Read the account email tied to the connection. |
Verify it worked
The Etsy connector in PopMCP flips to Connected and shows your shop name, and a shop or listings tool returns your real listings.
Troubleshooting
403 on every call right after registering
Why: The app has not been approved yet, so the keystring is inactive.
Fix: Check the app's row on the Developer Portal Dashboard and wait until it reads Approved.
invalid_api_key or 401 from the token endpoint
Why: The shared secret was copied while still masked, or the keystring and secret came from two different apps.
Fix: Reveal the shared secret with the visibility icon and re-copy both values from the same app page.
redirect_uri mismatch during sign-in
Why: PopMCP's callback URL is not registered on the Etsy app, or it differs by a trailing slash or by http versus https.
Fix: Copy the callback URL exactly as PopMCP prints it into the app's Callback URLs list.
429 Too Many Requests
Why: The app exceeded its Queries Per Second or Queries Per Day allowance.
Fix: Honour the retry-after header, then email developer@etsy.com with your use case to request higher limits.
Seller app cannot see another shop's data
Why: Seller apps are scoped to the registering account's own shop by design.
Fix: Register a personal app instead, and request an upgrade to commercial access if you need more scale.
Every request fails with a malformed key error
Why: Only the keystring was sent in the x-api-key header.
Fix: Etsy v3 wants keystring and shared secret joined by a colon. Confirm both fields are filled in PopMCP.