pixelgrade said@chainbreakr You are doing it wrong. The client should be entering his username and own Secret API key. They should not be using yours. That way they only have access to their purchases.
He’s probably buying his client themes with his own account, not setting on up for each(like you prob should be)