Yotpo
Connect Yotpo to read and collect product reviews and ratings, answer shopper questions, sync catalog and orders, and run loyalty points and referrals.
You paste your Yotpo Store ID, which older docs call the app key, and the API secret revealed from General Settings. If you run Yotpo Loyalty & Referrals you also paste its own API key and GUID from a separate admin.
- Setup time
- 6 min
- Auth
- API credentials
- API base URL
- https://api.yotpo.com/core/v3
- Rate limits
- The Loyalty & Referrals API allows about 10 requests per second per merchant account and returns 429 beyond that. Yotpo does not publish a hard limit for the Core API.
Before you begin
- A Yotpo account with the Owner or Admin role. The API secret is hidden from Staff and Customer Service teammates
- Access to the inbox of the email address on the Yotpo account. Revealing the secret requires an emailed verification code
- A Yotpo Loyalty & Referrals subscription, only if you want the loyalty, points and referral tools. It is a separate product with its own credentials
Get your credentials
Open Account Settings
Sign in to Yotpo Reviews, Loyalty or Visual UGC. Click the account menu in the bottom-left corner and choose Account Settings.
Copy the app key from General Settings
Click General Settings and scroll to the bottom. Copy the value labelled App key, which is the same thing Yotpo now calls the Store ID.
General Settings
Account details, store identity and API credentials sit on this one screen.
- Account name
- Northwind Supply
- Store domain
- northwind-supply.myshopify.com
- App key (Store ID)
- gT7q****Zk21
Every Core API v3 path is scoped to this app key.
Reveal the API secret
Click Get secret key on the same screen. Paste the code Yotpo emails you into Verification code, click Submit, and copy the secret from the next screen.
General Settings
PopMCP exchanges this secret for short-lived access tokens itself, so you never paste a token.
Optional: copy the Loyalty API key and GUID
Skip this unless you use Loyalty & Referrals. Open the Loyalty admin, go to Settings, then General Settings, and copy the API Key and the GUID.
General Settings
Loyalty & Referrals uses its own credential pair, separate from the Core API.
- GUID
- a1b2c3d4-****-****-****-9f0e1d2c3b4a
- API Key
- lk_****************7e3d
The Loyalty API sends both as the X-GUID and X-API-KEY headers and rejects one without the other.
Paste the values into PopMCP
Enter the Store ID (app key) and API secret. Add Loyalty API key and Loyalty GUID only if you completed the previous step, then click connect.
Connect in PopMCP
Open your workspace, choose Yotpo in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| Store ID (app key)text | Yotpo admin → Settings → Store settings. Yotpo calls this the Store ID; older docs call it the app key. It scopes every tool to this store. |
| API secretsecret | On the same Store settings screen, visible to Yotpo account admins. We exchange it for short-lived access tokens automatically, so you never paste a token. Stored encrypted and used server-side only.Encrypted with AES-256-GCM on save and never shown again. |
| Loyalty API key (optional)secret | Only for Yotpo Loyalty & Referrals, which uses its own credentials. Loyalty admin → Settings → General settings → API keys. Unlocks points, redemptions, referrals, VIP tiers and loyalty campaigns.Encrypted with AES-256-GCM on save and never shown again. |
| Loyalty GUID (optional)text | Shown next to the Loyalty API key on the same screen. Required alongside it — the Loyalty API needs both. |
PopMCP verifies the credential against Yotpo immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Verify it worked
PopMCP marks Yotpo as Connected and names your store. Asking for your most recent product reviews returns real review text and star ratings, and with the loyalty pair added a customer's points balance resolves too.
Troubleshooting
401 with 'The Store ID or Secret you have provided is invalid'
Why: The secret was regenerated, or the Store ID belongs to a different store on a multi-store Yotpo account.
Fix: Reopen Account Settings, General Settings, confirm the App key matches what you pasted, click Get secret key again and reconnect with the fresh pair.
The Get secret key button is missing
Why: You are signed in as Staff, Customer Service or Insights Only. The secret is visible only to the account Owner or an Admin.
Fix: Ask the Yotpo account owner to run these steps, or have them promote you under Account Settings, Teammates.
Loyalty tools return 401 while reviews work fine
Why: The Loyalty API key and GUID were left blank, or only one of the two was filled in.
Fix: Copy both values from Settings, General Settings in the Loyalty admin. The Loyalty API rejects one without the other.
429 Too Many Requests on loyalty calls
Why: The Loyalty API caps each merchant account at roughly 10 requests per second.
Fix: Space the requests out. The ratelimit-remaining and ratelimit-reset response headers tell you when the window clears.
The verification code email never arrives
Why: Yotpo sends the code to the address on the Yotpo account, which may differ from the address you signed in with through SSO.
Fix: Check the address shown under Account Settings, Teammates for your user, and look in spam before requesting a second code.