# Yotpo setup for PopMCP

You paste your Yotpo Store ID, which older docs call the app key, and the API secret revealed from General Settings. If you run Yotpo Loyalty & Referrals you also paste its own API key and GUID from a separate admin.

- Auth: API credentials
- Setup time: 6 min
- API base URL: https://api.yotpo.com/core/v3
- Credentials screen: https://settings.yotpo.com/#/general_settings
- Provider docs: https://core-api.yotpo.com/reference/welcome

## Before you begin

- A Yotpo account with the Owner or Admin role. The API secret is hidden from Staff and Customer Service teammates
- Access to the inbox of the email address on the Yotpo account. Revealing the secret requires an emailed verification code
- A Yotpo Loyalty & Referrals subscription, only if you want the loyalty, points and referral tools. It is a separate product with its own credentials

## Get your credentials

### 1. Open Account Settings

Sign in to Yotpo Reviews, Loyalty or Visual UGC. Click the account menu in the bottom-left corner and choose Account Settings.

Screen: https://settings.yotpo.com/#/general_settings

### 2. Copy the app key from General Settings

Click General Settings and scroll to the bottom. Copy the value labelled App key, which is the same thing Yotpo now calls the Store ID.

Screen: https://settings.yotpo.com/#/general_settings

### 3. Reveal the API secret

Click Get secret key on the same screen. Paste the code Yotpo emails you into Verification code, click Submit, and copy the secret from the next screen.

Screen: https://settings.yotpo.com/#/general_settings

### 4. Optional: copy the Loyalty API key and GUID

Skip this unless you use Loyalty & Referrals. Open the Loyalty admin, go to Settings, then General Settings, and copy the API Key and the GUID.

Screen: https://loyalty-app.yotpo.com/settings

### 5. Paste the values into PopMCP

Enter the Store ID (app key) and API secret. Add Loyalty API key and Loyalty GUID only if you completed the previous step, then click connect.

## Fields PopMCP asks for

- Store ID (app key) (storeId) [required]: Yotpo admin → Settings → Store settings. Yotpo calls this the Store ID; older docs call it the app key. It scopes every tool to this store.
- API secret (apiSecret) [required]: On the same Store settings screen, visible to Yotpo account admins. We exchange it for short-lived access tokens automatically, so you never paste a token. Stored encrypted and used server-side only.
- Loyalty API key (optional) (loyaltyApiKey): Only for Yotpo Loyalty & Referrals, which uses its own credentials. Loyalty admin → Settings → General settings → API keys. Unlocks points, redemptions, referrals, VIP tiers and loyalty campaigns.
- Loyalty GUID (optional) (loyaltyGuid): Shown next to the Loyalty API key on the same screen. Required alongside it — the Loyalty API needs both.

## Verify

PopMCP marks Yotpo as Connected and names your store. Asking for your most recent product reviews returns real review text and star ratings, and with the loyalty pair added a customer's points balance resolves too.

## Troubleshooting

### 401 with 'The Store ID or Secret you have provided is invalid'

Cause: The secret was regenerated, or the Store ID belongs to a different store on a multi-store Yotpo account.

Fix: Reopen Account Settings, General Settings, confirm the App key matches what you pasted, click Get secret key again and reconnect with the fresh pair.

### The Get secret key button is missing

Cause: You are signed in as Staff, Customer Service or Insights Only. The secret is visible only to the account Owner or an Admin.

Fix: Ask the Yotpo account owner to run these steps, or have them promote you under Account Settings, Teammates.

### Loyalty tools return 401 while reviews work fine

Cause: The Loyalty API key and GUID were left blank, or only one of the two was filled in.

Fix: Copy both values from Settings, General Settings in the Loyalty admin. The Loyalty API rejects one without the other.

### 429 Too Many Requests on loyalty calls

Cause: The Loyalty API caps each merchant account at roughly 10 requests per second.

Fix: Space the requests out. The ratelimit-remaining and ratelimit-reset response headers tell you when the window clears.

### The verification code email never arrives

Cause: Yotpo sends the code to the address on the Yotpo account, which may differ from the address you signed in with through SSO.

Fix: Check the address shown under Account Settings, Teammates for your user, and look in spam before requesting a second code.

---

Source: https://www.docs.popmcp.com/docs/integrations/yotpo/