1. Open System users, click Add, choose Admin, then Assign assets and tick your ad accounts and Pages.
2. Click Generate token, tick ads_read and pages_read_engagement, set Never expires, and copy it.

1. On your phone, open Google Authenticator → menu → Transfer accounts → Export accounts. Tick only admin@kesselmediagroup.com → Next, and screenshot the QR code.
2. Pick that screenshot here.

1. In Events Manager, open the White Whale pixel → Settings → Conversions API → Generate access token. Copy the pixel ID too, and the code under Test events.

Check and save

1. In Stripe → Developers → Webhooks, add https://mcp.kesselmediagroup.com/ww/stripe for checkout.session.completed, checkout.session.async_payment_succeeded and payment_intent.succeeded, then reveal its Signing secret.
2. The site's signing secret is the one its backend uses for submission notices (32+ characters).

Save

The token can only send events to this one pixel. It can't see or change ads. Nothing is sent until sending is turned on, in test mode first.

1. In Slack, make the channel the alerts should go to (e.g. #kmg-alerts) and add whoever should see them.
2. Open your Slack apps → KMG Codes → Incoming Webhooks. Turn it On, click Add New Webhook, pick that channel and click Allow.
3. Click Copy next to the new Webhook URL and paste it here.

Connect and send a test

It can only post to that one channel. It can't read Slack. Delete the webhook any time to stop it.

Open Cloudflare, form already filled in

1. Sign in if asked. The token form opens with the name and the read-only permissions already set.
2. Click Continue to summary, then Create Token, then Copy. Paste it below. Cloudflare shows it only once.

Form came up empty? Fill it in by hand.

1. On API Tokens click Create Token, then Get started next to Create Custom Token. Name it KMG read-only.
2. Under Permissions add two rows: Account → Workers Scripts → Read, and Account → Account Analytics → Read.
3. Leave everything else as it is, then Continue to summary → Create Token → Copy.

Check and connect

Read-only: it can't change or deploy anything. Delete it under API Tokens any time.

Rather not make a token? Paste the list instead.

Paste each Checkout Champ funnel name next to the Google Ads conversion action it goes to, one per line (e.g. DG6 → Purchase DG6). Copy it straight from the Worker's code if it's there.

Save the list

1. Each brand has its own Gorgias, so do this once per brand. Open that brand's Gorgias, then Settings → REST API (under App Store or Integrations, depending on your plan).
2. Copy the three things it shows: the Base API URL (or just the address in your browser), your Username (an email) and the Password (API Key). Click Create API key first if there isn't one.

Connect

We only read tickets and customer messages. Agent replies aren't kept, and names, emails and phone numbers are removed. Delete the key in Gorgias any time to stop it.

1. On your phone, open Google Authenticator → menu → Transfer accounts → Export accounts. Tick only the Shopify login → Next, and screenshot the QR code.
2. Pick that screenshot here.

Then delete the screenshot from your Photos and from Recently Deleted: it is the key to the login. Your app keeps working as before.

1. Open Trendtrack settings, then API, create a key and copy it. No Trendtrack yet? Skip this; it can be added later.

1. Open Voluum, then Settings → Security → Access keys, click Create, and copy both values.

I don't have these, skip