Connect a read-only key to list your game

Our server reads your wishlists from Steam once a day with a key that can only read reports. You can take it back in Steamworks at any time.

A read-only key is the only way onto the board. If any step gets stuck, send us the result and we will see it through with you.

Step 1 · Make a read-only key in Steamworks

Sign in to Steamworks as an administrator of the partner account and open Users & Permissions → Manage Groups.
Create a group named GameProof and add no users.
Add the game you are listing to this group. Skip this and Steam cannot read the game, so the check fails.
On the group page click Create WebAPI Key, make sure Financial is ticked, and save. It is the only one we use.
Leave the allow list empty: it is not needed.

A key with only the Financial permission can read sales and wishlist reports and nothing else: it cannot log in to Steamworks, change your store page, prices or builds, generate keys, or see player data.
It can read more than wishlists: Steam has no key limited to wishlists or to one game, so the same key can read sales reports for every game on your account. By default we read this game’s wishlists and net sales per day and keep nothing about other games; sales stay private to you, and you can turn reading them off in the console.
The key is sealed with a public key before it is stored; the web process holds no private key. Only the sync process can open it, and it uses the key for Steam requests only. It is never logged, never shown in errors, never emailed.
Pages and the console show only the last four characters and a fingerprint.
We call Steam only from the fixed IP 43.153.46.76. The key's allow list can stay empty.
Delete the group or regenerate the key in Steamworks at any time. Our copy stops working immediately and the page keeps the last successful sync.