The Edge Publish API uses the current API-key model: requests authenticate
with the API key and the client ID directly. No Azure Active Directory app
registration is involved. If older documentation walks you through Azure AD,
it describes the retired model.
Prerequisites
- Enroll in the Microsoft Edge program on Partner Center. Enrollment for the Edge program has no fee.
- Build a store zip (
npx extension build --browser edge --zip). - Create a new extension in Partner Center and submit that zip by hand.
- After the product exists, collect the three values below.
Get the Product ID
- Open Partner Center and choose your extension from the overview page.
- Scroll to the Extension Identity section.
- Copy the Product ID, which is a lowercase GUID.
The Product ID is not the Store ID. The Store ID is the uppercase alphanumeric
value in your public listing URL, for example
0RDCK9HT9JJ7. The API wants
the GUID, lowercase with hyphens.Get the client ID and API key
- Open the Publish API page in Partner Center.
- If the API is not yet enabled for your account, choose Turn on API.
- Copy the Client ID shown on the page.
- Choose + New API key and copy the generated key immediately.
Blast radius and rotation
To rotate, generate a new API key on the Publish API page and re-enter it wherever it is stored. Saved platform secrets are write-only, so rotation always means re-entering the value.Name map
The same values wear different names on each surface:The platform mirror stores the API key under the secret name
STORE_EDGE_CLIENT_SECRET for historical reasons. It is the Publish API key,
not an Azure AD client secret.
