Seven tabs
Workspace token
An agent connects to ItemShop with a workspace token (prefixiswt_). It is a shop API key with a list of scopes, created in Workspace → MCP → New token or in the Agent tab. You see the token only once — afterwards you can only revoke it.
A token never has more permissions than you do: if you lose a permission or access to the shop, the tokens you created stop working. Workspace settings, tokens and the GitHub connection can only be changed in the panel — a token cannot issue other tokens or raise its own permissions.
MCP tool groups
In Workspace → MCP you set a ceiling per group: Off, Read or Write. The agent gets the lower of two levels: the group ceiling and its token’s scopes.
Orders contain buyer data, so the group is off by default and has no write mode.
Publishing rules
In Workspace → Deployments you choose how changes reach players:Activity timeline
Every action on the site is recorded with its source and author. Entries are kept for 90 days.Who has access
Team members with thesite:read permission can see Workspace; people with site:write can change and publish. See Team.
Connecting agents
Claude Code, Codex, OpenCode, Gemini CLI, Cursor.
AI editor
The built-in ItemShop agent.