Amazon Selling Partner
Connect Amazon Selling Partner to manage orders, listings, FBA inventory, pricing, fees, reports, feeds, and finances for your seller account.
You end up with three values from your own SP-API app client in Seller Central. The LWA Client ID (amzn1.application-oa2-client.…), the LWA Client Secret (amzn1.oa2-cs.v1.…) and a self-authorization refresh token (Atzr|…), plus your region and optionally your Merchant Token.
Developer account approval before this connector works
Amazon must approve your SP-API developer profile before Login with Amazon credentials return live Selling Partner data. Roles Amazon marks Restricted carry an extra review of your data use and security controls, including an architecture review.
- Typical wait
- Amazon's only published figure is for service-provider registration and role approval: "processing can take up to 10 business days". Amazon does not publish a review time for the developer profile itself; developer-community reports commonly describe a few business days, sometimes stretching to several weeks. Treat anything beyond the 10-business-day figure as unofficial.
- Cost
- Amazon charges nothing for developer registration, SP-API application registration, or API calls. Note for context: an annual SP-API subscription fee plus a per-GET-call overage was announced in November 2025, postponed twice, and then reported as withdrawn in May 2026. Amazon has not published a standing fee schedule, and the withdrawal is documented in third-party reporting citing Amazon partner emails rather than on an Amazon page - so do not quote a dollar amount to users as current Amazon policy.
- Blocked until approved
- Everything against production: you cannot register a production SP-API application, cannot obtain a usable LWA client ID/secret for live data, and sellers cannot authorise you (the role checkboxes stay unavailable in Seller Central). Separately, the roles Amazon designates Restricted - Direct-to-Consumer Shipping (Restricted), Professional Services (Restricted), Tax Invoicing (Restricted), and Tax Remittance (Restricted) - stay locked until the additional data-use and security review passes, so any call needing the buyer PII those roles carry returns an authorisation error even after basic approval.
- Works meanwhile
- Build against the SP-API sandbox. Static, dynamic, and AI sandbox environments return mock or realistic responses without live seller data, so the API models, request signing, and SDK/auth plumbing can all be finished and tested first. Amazon does not explicitly frame the sandbox as a during-review activity and application registration still requires a primary account user, so confirm what your account can create before planning around it.
Where to apply: Seller Central > Apps & Services > Develop Apps > Developer Profile (sellers/vendors), or the Solution Provider Portal for service providers. Complete the developer profile form, pick Private or Public Developer, select roles, give a use case, and answer the security control questions. Track it at Developer Registration Request Status; approved developers then register apps under Develop Apps or via Add new app client.
- You must be the primary account user to complete registration.
- Public developers must have a publicly accessible website describing their services - Amazon lists this as a registration requirement, and a thin or missing site is a common rejection cause.
- The security-control questionnaire must be answered truthfully about controls you actually have (encryption at rest and in transit, key rotation, logging, least privilege, incident response). Aspirational answers get caught in the review.
- Requesting Restricted roles you do not genuinely need adds an architecture review and a demand for detailed information about your intended use. Request only the roles your use case needs.
- Amazon's public-developer registration page states you must respond within five days to a request for additional information: "Cases without responses within five days are closed."
- Public (multi-seller) developers face a heavier review than private developers integrating only their own account.
- Setup time
- 30 min
- Auth
- API credentials
- API base URL
- https://sellingpartnerapi-na.amazon.com
- Rate limits
- SP-API throttles per operation using a token bucket. Each endpoint has its own rate and burst, and exceeding it returns 429 QuotaExceeded, so retry with backoff.
Before you begin
- A Professional selling account on Seller Central. Individual accounts cannot register for SP-API.
- Sign in as the Primary User of the Seller Central account. Only the Primary User sees the Authorize option.
- A completed developer registration. Amazon reviews the developer profile and commonly takes a few business days.
- Register as a private developer if the app only ever talks to your own seller account. Public Appstore apps need a separate listing and review.
Get your credentials
Open Developer Central
Sign in to Seller Central and choose Apps and Services, then Develop Apps. If you have never registered, complete the developer profile and pick private developer.
Developer Central
App clients registered to this developer profile.
No app clients yet
Add one to get an LWA Client ID and Client Secret.
If you see a Complete your developer profile form instead of this page, submit that first and wait for approval.
Add a new app client
Click Add new app client, name it PopMCP, choose SP API from the API Type list and tick Sellers. Select the roles your tools need, then leave OAuth Login URI and OAuth Redirect URI blank and click Save and exit.
App registration
Roles you skip here return 403 later.
Copy the LWA Client ID and Client Secret
Find your app on the Developer Central page, choose Edit app, then click View under LWA credentials. Copy Client identifier into PopMCP's LWA Client ID and Client secret into LWA Client Secret.
Developer Central
| App name | App ID | Status | Actions |
|---|---|---|---|
| PopMCPSP API / Seller | amzn1.sellerapps.app.****9f2c | Draft | Edit app |
These two stay viewable here. Come back to them any time.
Authorize the app to mint a refresh token
Open the arrow next to Edit app and choose Authorize. On the Authorize application page click Authorize app for your seller account, then copy the Atzr| token into PopMCP's Refresh token.
Authorize application
PopMCP (amzn1.sellerapps.app.****9f2c)
| Selling partner account | Marketplace | Authorization | Action |
|---|---|---|---|
| Acme SupplyMerchant A1B****XQ7Z | Amazon.com | Not authorized | Authorize app |
Each click of Authorize app issues another refresh token. Earlier tokens keep working.
Set Region and, optionally, the Merchant Token
Set Region to na, eu or fe to match your marketplace, and leave Environment on production. For Selling Partner ID, open the Settings menu at the top right of Seller Central, go to Account Info, then Merchant Token, and copy that value.
Connect in PopMCP
Open your workspace, choose Amazon Selling Partner in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| Auth typepreset | SP-API uses Login with Amazon. We only ever store your LWA Client ID / Secret and refresh token (encrypted) and mint short-lived access tokens from them server-side. No AWS IAM or SigV4 signing is required. |
| LWA Client IDtext | From your SP-API app: Seller Central → Develop Apps → your app → 'LWA credentials' → Client ID. |
| LWA Client Secretsecret | The secret paired with your LWA Client ID (same 'LWA credentials' panel). Stored encrypted; used only server-side to mint access tokens.Encrypted with AES-256-GCM on save and never shown again. |
| Refresh tokensecret | Generate it by clicking 'Authorize' on your app in Seller Central (self-authorization). Starts with 'Atzr|'. It is long-lived and does not expire on use.Encrypted with AES-256-GCM on save and never shown again. |
| Regiontext | na |
| Selling Partner ID (optional)text | Your Merchant / Seller ID (Seller Central → Settings → Account Info → Merchant Token). Optional, but if provided it's auto-filled into the Listings API so you don't have to pass it each call. |
| Environment (optional)text | production |
PopMCP verifies the credential against Amazon Selling Partner immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Verify it worked
PopMCP's Amazon Selling Partner connector shows Connected, and a request such as "list recent orders" returns real order IDs from your seller account in the region you selected.
Troubleshooting
401 Unauthorized from the LWA token endpoint
Why: The Client ID or Client Secret does not match, or the refresh token came from a different app client.
Fix: Re-copy all three values from the same app in Developer Central. A refresh token is only valid for the app client that issued it.
403 Unauthorized, access to requested resource is denied
Why: The app is missing the role that covers that API, or the refresh token was minted before you added the role.
Fix: Edit the app to add the role, save, then run Authorize again to get a fresh refresh token.
No Authorize option next to Edit app
Why: You are signed in as a secondary user, or the developer profile is still under review.
Fix: Sign in as the account's Primary User and wait until developer registration is approved.
You lost the refresh token
Why: Amazon shows the token on the Authorize application page and does not keep it in a credentials panel.
Fix: Click Authorize app again to issue a new one. Existing tokens are not invalidated by this.
Calls return 400 or empty results for your marketplace
Why: Wrong region. An EU marketplace queried against the na endpoint returns nothing.
Fix: Set Region to na, eu or fe to match the marketplace and reconnect.
429 QuotaExceeded
Why: SP-API throttles per operation with its own rate and burst budget.
Fix: Slow the calls down and retry with backoff. The budget refills continuously and differs per endpoint.
Reference
AliExpress
Connect AliExpress to search products for dropshipping, read prices and stock, quote shipping, place and pay orders, track deliveries, and generate affiliate links.
BigCommerce
Connect BigCommerce to manage products, categories, orders, customers, carts, checkouts, and coupons for your store.