Replica Key

The replica key is what allows pepe.business to access the structured content of your website. It can take several forms depending on your stack.

Format 1: E-commerce API (Shopify, WooCommerce, etc.)

If you use Shopify, WooCommerce, BigCommerce, etc., you already have a product API. Give pepe.business your API key:

POST /v1/autopilot/sources
{
  "type": "shopify",
  "shopUrl": "https://my-shop.myshopify.com",
  "apiKey": "shpat_xxxxxxxxxxxx",
  "apiSecret": "shpss_xxxxxxxxxxxx"
}

pepe.business connects immediately and indexes your products.

Supported e-commerce platforms:

Platform	Type	How to get the key
Shopify	`shopify`	Admin > Apps > Develop apps > Create > API key
WooCommerce	`woocommerce`	WP Admin > WooCommerce > Settings > Advanced > REST API
BigCommerce	`bigcommerce`	Control Panel > Settings > API > Store API Tokens
Wix Stores	`wix`	Wix Dashboard > Settings > Headless > API Key
Squarespace Commerce	`squarespace`	Squarespace > Settings > Advanced > Developer API
Magento	`magento`	Admin > System > Integrations > Add New Integration
Custom REST	`custom`	Your `/api/products` endpoint with Bearer auth

Custom REST API

If you have your own API:

POST /v1/autopilot/sources
{
  "type": "custom",
  "baseUrl": "https://my-shop.com/api",
  "endpoints": {
    "products": "/products",
    "articles": "/blog/posts",
    "services": "/services"
  },
  "auth": {
    "type": "bearer",
    "token": "sk_my_api_xxx"
  },
  "pagination": "cursor"
}

pepe.business automatically detects the schema.

Format 2: Sitemap + crawl

If you don't have an API, pepe.business can crawl your site from the sitemap:

POST /v1/autopilot/sources
{
  "type": "crawl",
  "sitemapUrl": "https://my-site.com/sitemap.xml",
  "excludePatterns": ["/admin/*", "/cart/*", "/account/*"]
}

Less structured than an API, but works everywhere.

Format 3: RSS / Atom

For blogs and news sites:

POST /v1/autopilot/sources
{
  "type": "rss",
  "feedUrl": "https://my-blog.com/feed.xml"
}

Format 4: Universal pepe "Replica" key

You can generate a replica key from your pepe.business dashboard that acts as a universal proxy:

POST /v1/autopilot/sources
{
  "type": "pepe_replica",
  "sourceUrl": "https://my-site.com",
  "replicaKey": "rk_live_xxxxxxxxxxxx"
}

The rk_live_ key is a unique identifier linked to your site. pepe.business uses it to:

authenticate to your CMS if configured
track incremental changes
synchronize in real time

You generate this key in Dashboard > Auto-Pilot > Sources > Generate replica key.

Security

Keys are encrypted AES-256 at rest
Never logged in plain text
Stored in a separate vault
Can be revoked at any time (DELETE /v1/autopilot/sources/{sourceId})
Scoped to "product/content read-only" usage

Connection test

POST /v1/autopilot/sources/{sourceId}/test

{
  "status": "ok",
  "productsDetected": 247,
  "lastSync": "2026-07-13T10:00:00Z",
  "sample": [
    { "id": "prod_1", "title": "Organic t-shirt", "price": 29.90, "imageUrl": "..." }
  ]
}

Continuous sync

By default, pepe.business rescans every 24h. You can configure a webhook for immediate sync on each change:

POST /v1/autopilot/sources/{sourceId}/webhook

Response: a URL to call from your e-commerce when a product is created/modified.