ShipStation
Connect ShipStation to manage orders, buy and void shipping labels, rate-shop carriers, and handle customers, products, stores, warehouses, and webhooks.
You end up pasting the ShipStation V1 API Key and its matching API Secret, generated by the Account Owner on the API Settings screen, into PopMCP.
- Setup time
- 5 min, including the email verification round trip
- Auth
- API credentials
- API base URL
- https://ssapi.shipstation.com
- Rate limits
- 40 requests per minute per API key and secret pair. Over the limit ShipStation returns HTTP 429 with X-Rate-Limit-Reset giving the seconds remaining.
Before you begin
- A ShipStation account on any paid plan
- You must be signed in as the Account Owner. Other users do not see the key generator.
- Access to the owner's mailbox. ShipStation emails a verification link before it will mint keys.
- Room for another V1 credential pair. Only two sets can be active at a time.
Get your credentials
Sign in as the Account Owner
Log in at ship.shipstation.com or ss.shipstation.com with the Account Owner login. Switch accounts now if you are signed in as a sub-user.
Open API Settings
Open Settings, choose Account in the settings side navigation, then choose API Settings. The deep link https://ss.shipstation.com/#/settings/api opens the same screen.
API Settings
Generate and manage the API credentials for this account.
| API Version | Key | Status | Expires |
|---|---|---|---|
| V1 APILegacy | Not generated | None | - |
PopMCP uses the V1 key and secret pair. V1 and V2 keys are not interchangeable.
Select V1 API and verify your email
Pick V1 API in the Select API Version dropdown and click Generate API Key. Open the verification link ShipStation emails to the owner address, then return to API Settings.
API Settings
Generate and manage the API credentials for this account.
- Owner email
- owner@acmesupply.com
- Status
- Awaiting verification
- Link sent
- Mar 4, 2026, 10:12 AM
Set the expiration and generate the pair
Choose an expiration of 3, 6 or 12 months and click Generate. Click the copy icon beside the API Key and again beside the API Secret.
API Settings
Generate and manage the API credentials for this account.
- API Key
- 3f8a****c19d
- API Secret
- b47e****02fa
- Expires
- Mar 4, 2027
Paste both values into PopMCP
Put the API Key in PopMCP's API Key field and the API Secret in API Secret, then save.
Connect in PopMCP
Open your workspace, choose ShipStation in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| API Keysecret | In ShipStation go to Settings → Account → API Settings and click "Generate API Keys" (only the Account Owner can, and must have verified their email). Copy the API Key. Sent as HTTP Basic auth, stored encrypted, used server-side only. The connection is locked to this key's account.Encrypted with AES-256-GCM on save and never shown again. |
| API Secretsecret | Same screen (Settings → Account → API Settings): copy the API Secret shown next to the API Key. If you don't see a secret, click "Generate API Keys". Regenerating the keys invalidates the old pair.Encrypted with AES-256-GCM on save and never shown again. |
PopMCP verifies the credential against ShipStation immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Verify it worked
PopMCP marks the ShipStation connector as Connected and a test call such as listing stores returns your real store list rather than a 401.
Troubleshooting
401 Unauthorized on every request
Why: The key and secret are swapped, one was truncated on copy, the pair expired, or it was regenerated after PopMCP stored it.
Fix: Generate a fresh V1 pair on Settings → Account → API Settings and re-save it, with the key in the key field and the secret in the secret field.
The Generate API Key button does nothing
Why: The owner's email is not verified yet, so ShipStation is waiting on the link it emailed.
Fix: Open the verification link in the owner's mailbox, reload API Settings, then click Generate API Key again.
No key generator on the API Settings page
Why: You are signed in as a sub-user rather than the Account Owner.
Fix: Sign in with the Account Owner login and reload the API Settings screen.
The key and secret disappeared before you copied them
Why: ShipStation shows the values only to the user who generated them, and only until you leave the page.
Fix: Generate a new pair and copy both values before navigating away. Delete an old pair first if two V1 sets are already active.
429 Too Many Requests
Why: More than 40 calls in a rolling minute on this key pair.
Fix: Back off until the X-Rate-Limit-Reset window elapses and batch reads instead of polling in tight loops.
Reference
Shippo
Connect Shippo to rate-shop carriers, buy and refund shipping labels, validate addresses, track packages, handle customs, and run orders, manifests, pickups, and batches.
ElevenLabs
Connect ElevenLabs to turn text into speech, design and clone voices, transcribe and dub audio, and build voice agents.