Developer access

When you hire someone to build a theme, you don’t hand over your store. You grant a scoped Theme Access key from Settings → Developer access.

What a Theme Access key can do

• Edit your theme’s code and publish theme changes.
• Preview drafts before anything goes live.

What it can not do

• It cannot switch your live theme, buy a paid theme with your payment method, or delete a theme — those stay owner-only.
• It cannot touch orders, customers, payments, or settings — it’s scoped to themes and nothing else.

So a developer can build and publish a theme, while you keep control of go-live and everything commercial.

Granting access

1. Go to Settings → Developer access.
2. Enter the developer’s email and (optionally) a label.
3. Choose an expiry (30 days by default).
4. Copy the key that’s shown once and send it to the developer. They use it with the Cartisto CLI.

The developer runs cartisto login --store <your-store> --key <key> and works from their own editor.

Managing access

Developer keys are listed by person, with their expiry and last-used time. Revoke a key the moment a project ends or if it’s ever exposed — it stops working immediately.