A WooCommerce store's keys, posted once its owner approved (design 14.0; 15.0 §3.2).

The POST is unsigned and names neither the store nor the company: its user_id is the one-time value the approval page was given, which names the company's connection to the store, taken once (400 when unknown, used or older than thirty minutes). The keys are kept, sealed, with the key's permission, as pending, and the answer is 200 at once — the store waits for it before sending its owner back, and on a small host a read of the store from here could wait on the store's own busy workers. The portal checks them with one read when the browser comes back.