How to connect
SourceMedium connects to Impact with a Brand Account SID and Auth Token. You create that token in Impact and paste it into SourceMedium.You connect data sources yourself in SourceMedium. Sign in to your SourceMedium account, open your store, then in the Data sources section click Connect data source and choose the platform. You need an Editor or Admin role on the store. If you have view-only access, ask an admin or editor on your team to connect it.Once it is connected, what happens next covers first-sync timing and what each connection status means.
1
Create a Brand access token in Impact
In Impact, go to Settings → Technical → API and choose Create Access Token. Name it SourceMedium. When it asks for an API version, keep the latest version. That is the default. Use a Brand token. SourceMedium calls the Advertisers API at
https://api.impact.com/Advertisers/{AccountSID}/.... A Partner or Agency token signs in and then gets Access Denied on these calls.Copy the Account SID and Auth Token. Editing the permissions on an existing token keeps the same Auth Token. Reset issues a new Auth Token and the previous token stops working immediately. The Account SID stays the same. Paste the new token into SourceMedium after a reset.Impact’s guide: Create an API key.2
Turn on read access
Tokens created since April 2025 are scoped. Turn an API category on, then select read inside it. Impact’s example of that shape is “Campaigns (read)”. Their docs do not publish the full checkbox list, so match the calls below. Tokens created before April 2025 are a single read-only or read/write choice. The security note at the bottom means these read toggles.Turn on read for:
- Campaigns, so SourceMedium can list your programs.
- Actions, so SourceMedium can read credited partner actions. The sync uses three reads. If the screen lists them separately, turn on read for each one:
GET /Advertisers/{AccountSID}/ActionsGET /Advertisers/{AccountSID}/ActionUpdatesGET /Advertisers/{AccountSID}/Actions/{ActionId}
3
Add the credentials in SourceMedium
Find Impact Radius in the connector picker and click Connect. Paste the Account SID and Auth Token, then select the program to sync.
4
Confirm it is connected
SourceMedium checks the credentials before saving them. It lists programs, then reads Actions for the program you select. When Actions returns Access Denied, the token signed in and its scopes block Actions. Edit the token using the step above. When those read permissions are already on and Actions still returns Access Denied, ask Impact. They describe that response as a scope or persona block. Mention it if the program state is DELINQUENT (past due on payments). Impact does not document that state as the cause of a read denial.The connection reads Awaiting first data until the first sync lands, then Connected.
SourceMedium only ever reads from your connected platforms. It does not create, change, or delete anything, so create the key with read-only access wherever the platform offers it. Treat it like a password: keep it confidential and avoid sharing it over email or in spreadsheets. If the credential is rotated or revoked, follow this guide’s connection method to update SourceMedium.

