Access, Credentials and Download Boundaries
Protect store access and secrets; distinguish private managed downloads from ordinary external URLs.
On this page
Review store access
Owners and authorized Discord managers open the store workspace. Keep server-management permissions limited to trusted staff. Granular team seats and custom permission roles are not currently included.
Keep keys server-side
PayPal configuration and merchant API secrets belong in trusted server environments. Never paste them into storefront copy or client JavaScript. Revoke API keys when no longer needed; coordinate PayPal reconnection because verification of older transactions depends on the original merchant.
Choose download protection
External URLs retain their host's access rules. Basic+ protected uploads use buyer-authorized downloads. The default is a short-lived signed link; optional vault mode uses a 24-hour, single-use, network-bound link. This cannot erase a downloaded copy, and an eligible buyer can request a fresh link.
Use the right operational view
Inspect Orders delivery results, Enterprise webhook history and available job status. A general dashboard-edit audit-log page is not included. Platform admin actions are restricted to authorized platform admins.