Areca Docs

Clients and sites

Create clients and sites, understand the site key and site token, rotate a token, and delete clients and sites.

A client is the company you build and run websites for. Each client has one or more sites, and each site connects to one website project. Clients and sites are created and managed in the Agency workspace, so only agency admins can add them.

Before you start

Agency admins must use two-factor authentication. Creating a site, rotating a token and deleting a client or site ask you to confirm with a fresh authenticator code. Keep your authenticator app ready. See two-factor and step-up.

Create a client

Open the Agency workspace. Use the workspace switcher at the top of the sidebar, then open Clients.

Select New client. Enter the Name, as your team and the client will see it.

Check the short name. Areca fills in a Short name from the name. It appears in addresses and exports, and you can't change it later.

Select Create client. You land on the client's page, where you can add its first site.

The New client sheet with the Name field filled in and the suggested Short name shown below it

Create a site

Open the client and select New site. The sheet has two steps.

Step 1: describe the site.

FieldWhat to enter
Site nameThe name shown in the sidebar and the site picker.
Short nameThe site key. Your website project uses it to identify the site. It is suggested from the site name and can't be changed later.
Production URLThe full address of the live site, such as https://example.com. Previews open at this address too.

Select Create site.

The New site sheet, step 1, with the Site name, Short name and Production URL fields filled in for Harbor & Pine Bakery

Step 2: connect the site. Areca shows the site token once, with a ready-to-paste environment snippet. Copy the snippet into the website project's .env.local file, or run areca init in the project and paste the token when it asks. Then select I've saved it.

The site token shown once in step 2, with the ready-to-paste environment snippet and the I've saved it button

The token is shown once

Areca stores only a secure fingerprint of the site token, so it can't be displayed again. If you lose it, rotate it (see below). Rotating also replaces the old token.

If you leave step 2 without selecting I've saved it, the site stays unconfirmed, and a card on the client's Sites tab reminds you to confirm. If you lost the token before confirming, rotate it.

The site key and the site token

These are two different values, and only one is secret.

  • Site key is the site's short name. It identifies the site to the website project, for example as --site-key in areca init. It is not secret, and you can see it at any time in Settings › Developer.
  • Site token lets the website project read published content and sync its content types. Keep it secret. It is stored in the project as ARECA_SITE_TOKEN.

Areca also issues a separate schema-write token for pushing content types from the project. See content types and tokens for how the two tokens are used and handled.

Rotate a site token

Rotate a token when it may have been exposed, or when someone who had it no longer needs it.

Open the site's Settings. In the site's sidebar, select Settings, then Developer.

Select Rotate token… in the Site token card, then confirm.

Copy the new token. Areca shows it once. Paste it into the website project's environment straight away.

The old token stops working immediately

Any website build that still uses the old token will fail until you update its environment. Change the project and rotate in the same sitting.

To replace the schema-write token, use Rotate schema token in the same tab. The website's builds never need it.

Change a site's name or Production URL

Open Settings › General. You can change the site name and Production URL there. The site key can't be changed. See site settings for every tab.

Delete a site

Deleting a site removes its entries, releases and settings for everyone who has access to it. Files in the Library stay.

Open Settings › General. Scroll to the Danger zone.

Select Delete site…, then type the site key to confirm.

This can't be undone

Deleting a site cannot be undone from the CMS. Make sure nothing in its entries or releases is still needed.

Delete a client

Deleting a client removes its people and their open invitations. Areca blocks the deletion while the client still has sites, so delete the sites first.

Open the client and select the Settings tab.

Select Delete client in the Danger zone, then type the client's short name to confirm.

On this page