One link to get into a client's App Store Connect, GitHub and DNS, without a shared password

GetSetKeys — Wed, 11 Nov 2026 08:17:12 +0000

Every web and app project starts the same way. Before anyone writes a line of code, the agency needs the client's accounts: App Store Connect, Google Play, GitHub, the domain's DNS, the host, Stripe.

In October we read the access guides that 119 agencies, freelancers and app builders send their clients. Some ran to a dozen pages. Many still named menus the platforms renamed years ago. Too many asked the client to send a password. And none of them could tell the agency what the client had actually done.

So we built GetSetKeys. The agency sends one link, and the client grants access on each platform's own screen. Each step gives the exact email to invite, the role to pick and a button straight to the right page. Then it does the part a guide can't: every step is checked, not ticked.

How the checking works

There are three kinds of check, and none of them needs the client's password.

1. One click. The client signs in on the platform's own page and approves. For GitHub that's a GitHub App: it adds the agency's account to the repo with the chosen role, then revokes the client's token and uninstalls itself. Nothing is kept to reuse.

2. The platform's own invite email. Where a platform only lets people invite by email (App Store Connect, Stripe, WP Engine and so on), the client sends the invite from inside the platform. The agency's invite emails come in through Cloudflare Email Routing to a Worker, which matches the platform's sender and subject and ticks the step when the real invite arrives.

3. Live DNS. For domain steps we look the records up live over DNS-over-HTTPS. When the records match, the step is done. Nobody sends a screenshot.

Beside every step sits Porter, an AI helper (Claude under the hood), for the "which role do I pick?" questions. It can't mark a step done or change anything. Only the platform's own checks do that.

Stack

TypeScript everywhere
React and Vite for the agency console and the client's page
Hono on Cloudflare Workers for the API, D1 for data, R2 for files
Cloudflare Email Routing into a Worker for invite emails, parsed with postal-mime
Clerk for agency sign-in
Anthropic's Claude for Porter

Try it

There's a sample console with sample clients, no sign-up needed: demo.getsetkeys.com

Your first client is free, with no card: getsetkeys.com

What we'd love to hear

Which platform do you wait longest for at kickoff?
If you run an agency or freelance, what does your access checklist look like today?
Is there a platform you'd want checked that isn't on the list?

DEV Community: GetSetKeys

One link to get into a client's App Store Connect, GitHub and DNS, without a shared password

How the checking works

Stack

Try it

What we'd love to hear