Our Etsy integration
Revised 22 October 2026
BenchMore US operates one private application on top of the Etsy Open API. It is attached to our own shop, BenchMoreUS, and exactly one person uses it: the shop owner.
The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.
Private, single shop
There is no public sign-up and no way for another seller to add a shop. The tool is not for sale and not offered to anyone else. Should that change, we would apply to Etsy for the proper access first and update this page.
What the tool does
- Looks up our shop's details so it knows it is working on the right shop.
- Reads our listings, including prices and stock, to keep our own records in line with Etsy.
- Edits our own listings when the owner asks it to: wording, tags, price, quantity.
- Reads our orders so that each one can be prepared and sent without delay.
What the tool never does
- It never opens another seller's shop or gathers data about other shops, sellers or shoppers.
- It never scrapes Etsy pages; every request goes through the official API.
- It never sends messages to buyers. Conversations stay on Etsy.
- It never sells, rents or shares Etsy data, never passes it to advertising or marketing platforms, never uses it for analytics and never uses it to train AI models.
The 4 permissions
shops_r | Read the shop profile to confirm which shop is connected. |
|---|---|
listings_r | Read our own listings, prices and stock. |
listings_w | Change our own listings on the owner's request. |
transactions_r | Read our own orders in order to ship them. |
Signing in
- The owner signs in on this site with a password. A strictly necessary session cookie keeps that sign-in alive for 45 minutes.
- The owner ticks a box to accept the app terms and privacy notice. We record the time and the terms version.
- Etsy asks the owner to approve the permissions, using OAuth 2.0 with PKCE, then sends the owner back to
https://benchmoreus.com/admin/etsy/callback. - We trade the one-time code for tokens. If the Etsy account is not the owner's, they are discarded.
How tokens are protected
Tokens are encrypted with AES-256-GCM before they go into the database, and the key is stored as a separate secret. The status page reports whether the shop is connected without ever showing a token. A token older than an hour is renewed before it is used.
Revoking access
Open your Etsy account settings, find the list of connected apps and remove this one; access stops immediately. The owner can additionally press disconnect on the status page to erase the stored tokens.
Trademark
The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.
Questions: hello@benchmoreus.com