How to get a Lemon Squeezy API key

Updated 2026-08-04

Creating one

1. Open your Lemon Squeezy dashboard.
2. Go to Settings → API.
3. Click + to create a new key.
4. Name it after where it will be used — FRGMNT works. Naming matters when you later need to know what to revoke.
5. Copy the value. It's shown once.

The limitation worth knowing

Unlike Stripe restricted keys, Lemon Squeezy API keys are account-scoped. You cannot restrict one to read-only or to specific resources.

That means a Lemon Squeezy key is inherently more powerful than a properly scoped Stripe key, and a leak is correspondingly more consequential. It's not a reason to avoid connecting anything — it's a reason to care more about where the key ends up living.

Practical mitigations:

• Only give it to tools you'd trust with account access
• Prefer tools that store it on your device rather than on a server
• Rotate periodically
• Revoke immediately if a device is lost or a vendor has an incident

What FRGMNT reads with it

• Active subscriptions, to compute recurring revenue
• Today's orders, for today's cash
• A validation call to confirm the key works

The key is stored in your device Keychain and used to call the Lemon Squeezy API directly from your phone. It is never transmitted to a FRGMNT server, because there isn't one — which matters more here than on Stripe precisely because the key can't be scoped down.

See the Lemon Squeezy integration for what's supported and where fee reporting is approximate.

Revoking

Same screen — Settings → API — delete the key. Anything using it stops working immediately; nothing else is affected.