Developer Tools
Developer Tools is accessible to users with the Developer role. It provides two capabilities for integrating programmatically with the Shoplogix IMS platform: API Credentials and Webhooks.
To reach it, navigate to Developer Tools in the left sidebar.
API Credentials
API credentials authenticate machine-to-machine access to the IMS REST API. Each credential consists of a client ID and a client secret that you exchange for an OAuth 2.0 Bearer token using the client credentials flow.
Creating a Credential
- Go to Developer Tools > API Credentials
- Select Add
- Enter a name that identifies the integration (e.g., "SCADA Integration", "Data Pipeline")
- Select the customer account scope
- Select the privilege level the credential should act with
- Optionally set an expiration date; leave blank for a non-expiring credential
- Click Save
The client secret is displayed once immediately after creation. Copy it now — it cannot be retrieved again. If you close the dialog without copying it, you must rotate the credential to get a new secret.
Rotating a Secret
To generate a new secret without changing the client ID:
- Find the credential in API Credentials
- Select Rotate Secret
- Copy the new secret immediately — it is shown once
- Update any integrations using the old secret before the rotation takes effect
The old secret is invalidated as soon as the rotation completes.
Deleting a Credential
- Find the credential in API Credentials
- Select Delete and confirm
Deletion immediately invalidates all tokens issued to that client ID. Any integration using the deleted credential will receive 401 Unauthorized responses. There is no grace period.
Credentials are scoped to your customer account. You cannot use a credential to access data outside the accounts it was granted access to at creation time.
Webhooks
Webhooks push event data to an HTTP endpoint you control when machine or steam trap states change on the platform. They are an alternative to polling the REST API for state updates.
Creating a Webhook
- Go to Developer Tools > Webhooks
- Select Add Webhook
- Fill in the webhook details:
| Field | Notes |
|---|---|
| Callback URL | The HTTPS endpoint that will receive event payloads |
| Event Type | Choose one event type per webhook: machine-alarm-state-change-event or trap-state-change-event |
| Enabled | Toggle the webhook on or off |
| Headers | Optional custom headers to include in each delivery request, as a JSON array: [{"key": "x-api-key", "value": "your-key"}] |
- Click Add Webhook
A signing secret is generated when the webhook is created. Copy it immediately — it is shown only once and is used to verify the authenticity of payloads delivered to your endpoint.
Managing Webhooks
From the Webhooks list, click any row to open the webhook detail page. From there you can:
- Enable or disable the webhook without deleting it — disabled webhooks do not deliver events
- Update the callback URL or headers
- Delete the webhook — delivery to that endpoint stops immediately
Event type cannot be changed after creation. To change the event type, delete the existing webhook and create a new one.
Deleting a Webhook
- Open the webhook from the Webhooks list
- Select Delete and confirm
Event delivery to the endpoint stops immediately upon deletion.
Related
- Webhooks — payload formats, delivery guarantees, and signature verification
- REST API — full API reference and token exchange flow
- User Management — role and privilege descriptions