Trustpilot
Connect Trustpilot to track your TrustScore, read and reply to service and product reviews, tag and triage feedback, and send review invitations.
You end up pasting a Trustpilot API key and Secret key from one application in Trustpilot Business, plus the domain your company is listed under, and the business user id of an Admin or Manager if you want to send invitations.
Paid plan required before this connector works
Trustpilot must enable the paid API module on your Trustpilot for Business account before the Developer Portal will issue a working API key. The docs are explicit: "You must have a Trustpilot for Business account with access to the API module to access Trustpilot API data."
- Typical wait
- Not published by Trustpilot - the API module is sold, not reviewed, so the wait is however long the sales/CSM conversation takes (days to weeks). No vendor-stated SLA exists.
- Cost
- Paid. Trustpilot publishes plan pricing at business.trustpilot.com/plans: Starter from USD 99/month, Plus from USD 319/month per domain, Premium from USD 799/month per domain (all billed annually on a 12-month commitment), Enterprise on request. The API module itself is a separate add-on whose price Trustpilot does not publish; the docs only list its tiers - Tier 1 = 200,000 API calls/year, Tier 2 = 1,000,000, Tier 3 = unlimited - and state that Enterprise plans include Tier 1 plus unlimited invitations.
- Blocked until approved
- Every endpoint. Without the API module there is no Integrations > Developers > APIs screen in Trustpilot Business, so no API key (Client ID) or secret is ever issued and there is nothing to authenticate with. That covers the public read endpoints (business unit lookup, public reviews), the private endpoints (review management, replies, tags), and the invitation endpoints alike - the docs state the API key must be sent on every request even for the public API, so there is no anonymous read path.
- Works meanwhile
- The full API reference at developers.trustpilot.com is public, so request/response schemas, OAuth flow shape and endpoint paths can all be coded against. No call, sandbox included, can be executed without the module.
Where to apply: Ask your Trustpilot Customer Success Manager or sales (business.trustpilot.com/request-demo) to add the API module to your subscription. Once it is on the account, you create the credential yourself: Trustpilot Business > Integrations > Developers > APIs > Create a new application, which yields the API key (Client ID) and secret (Client Secret).
- The API module is an add-on, not a plan feature - being on a paid Trustpilot Business plan does not by itself grant API access. Enterprise is the only tier the docs describe as including it (Tier 1) by default.
- The 'public' Trustpilot endpoints still require your API key, so you cannot prototype against real data before the module is live.
- The API key and the OAuth client credentials are the same pair - one application object serves both the API-key (public) and OAuth (private/business) flows.
- For the OAuth authorization-code flow, redirect URI handling is documented via Trustpilot's support article rather than the developer portal, and several integrators report needing Trustpilot to set the redirect URL on the application - budget for a support round-trip rather than assuming it is self-serve. (Not confirmed in current developer docs.)
- Access tokens from the OAuth flow are short-lived and paired with a refresh token; build refresh handling from the start.
- Setup time
- 8 min
- Auth
- API credentials
- API base URL
- https://api.trustpilot.com/v1
- Rate limits
- Trustpilot recommends staying under 833 calls per 5 minutes and 10,000 calls per hour.
Before you begin
- Trustpilot Business account with a claimed profile for your domain
- API access is included in Enterprise. On Premium it needs the API Module add-on, so it is not available on lower plans
- Admin role in Trustpilot Business, since a 403 Forbidden on the private endpoints is almost always a missing admin right
- For invitations only: the Trustpilot user you send on behalf of must have the Admin or Manager role
- For the six ds_ tools only: a separate Trustpilot Data Solutions subscription, which has its own key
Get your credentials
Open the Trustpilot APIs page
Sign in at businessapp.b2b.trustpilot.com and go to Get reviews → Invitation methods. Scroll down, click Try a different way to get reviews, then click Trustpilot API.
Trustpilot APIs
Create applications and manage the keys that call the Trustpilot APIs.
| Application name | API key | Domains | Created |
|---|---|---|---|
| Website widgetCreated by Dana Reid | 4Kx9****7b1c | www.example.com | Mar 4, 2026 |
Each row under Your applications is one application. The API key and the Secret must come from the same row.
Create a new application
Under Create a new application, enter a name such as PopMCP and enter the domains you want to use for redirect URIs, one per line. Click Create Application.
Trustpilot APIs
Create applications and manage the keys that call the Trustpilot APIs.
Only an Admin can create an application.
Reveal and copy both keys
Find the new row under Your applications and click the Eye icon to reveal the API key and the Secret. Click the copy icon beside each value and paste both into PopMCP.
Your applications
| Application name | Status | Created |
|---|---|---|
| PopMCPwww.example.com | Enabled | Mar 4, 2026 |
- API key (Client ID)
- 9fQ2mT****a41c
- Secret (Client Secret)
- s3cr****9d02
PopMCP exchanges the pair server-side for a client_credentials token at api.trustpilot.com/v1/oauth/oauth-business-users-for-applications/accesstoken.
Enter the domain your company is listed under
Paste your website URL or your Trustpilot profile link into PopMCP's Business domain field. Copy the domain exactly as it appears in your trustpilot.com/review/... URL.
Copy your business user id (invitations only)
Go to Settings → Business settings → Users, open the profile of the Admin or Manager who will send invitations, and copy their id. Leave PopMCP's Business user id field blank if you are not sending invitations.
Users
People who can sign in to this Trustpilot Business account.
| Name | Role | |
|---|---|---|
| Dana ReidBusiness user id 62a1****f0d9 | dana@example.com | Admin |
| Sam OkoroBusiness user id 7b4e****11c8 | sam@example.com | Manager |
| Alex VidalBusiness user id 91df****40ab | alex@example.com | Review manager |
- Business user id
- 62a1****f0d9
- Role
- Admin
Only Admin and Manager users can be named as the invitation sender.
Add a Data Solutions API key (optional)
Generate the key in the Data Solutions web app and paste it into PopMCP's Data Solutions API key field. Leave the field blank if you do not have that subscription.
Connect in PopMCP
Open your workspace, choose Trustpilot in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| API Keysecret | Trustpilot Business → Integrations → API Access. Trustpilot also calls this the Client ID. Stored encrypted and used server-side only.Encrypted with AES-256-GCM on save and never shown again. |
| API Secretsecret | The Secret shown beside the Key on the same API Access screen, sometimes labelled Client Secret. It must belong to the SAME application as the Key. This is what unlocks your private reviews, replies, and invitations.Encrypted with AES-256-GCM on save and never shown again. |
| Business domaintext | The domain your company is listed under on Trustpilot. Pasting your website URL or your Trustpilot profile link is fine; we trim it. If you already know your business unit id you can paste that instead. |
| Business user id (optional)text | Only needed to send review invitations. Trustpilot requires the id of the Admin or Manager the invitation is sent on behalf of. Find it on that user's profile page in Trustpilot Business. |
| Data Solutions API key (optional)secret | Only for Trustpilot Data Solutions, a separate paid product with its own key generated in the Data Solutions web app. Leave blank and everything except the six ds_ tools still works.Encrypted with AES-256-GCM on save and never shown again. |
PopMCP verifies the credential against Trustpilot immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Verify it worked
PopMCP shows the Trustpilot connector as Connected and displays your business unit name, domain, current TrustScore and review count on the connector card.
Troubleshooting
401 Unauthorized
Why: Trustpilot documents this as "Unauthorized. The request lacked valid authentication." and notes it is "often caused if the wrong authentication type is given with the request". In practice the API key and Secret were taken from two different applications.
Fix: Go back to Get reviews → Invitation methods → Try a different way to get reviews → Trustpilot API, click the Eye icon on a single application row, and copy the API key and Secret from that one row.
403 Forbidden
Why: Trustpilot's error reference attributes this to admin rights or plan level.
Fix: Trustpilot's own advice: "Make sure you have admin status and that you are signed up to the relevant Trustpilot plan." Ask an Admin to create the application, or add the API Module to your Premium plan.
404 on every business-unit call
Why: The domain entered is not the one the profile is listed under, for example example.com instead of www.example.com.
Fix: Open your public Trustpilot profile and copy the domain exactly as it appears in the trustpilot.com/review/... URL.
Invitations fail but reviews work
Why: The business user id is missing, or belongs to a user without the Admin or Manager role.
Fix: Go to Settings → Business settings → Users, open an Admin or Manager profile, and paste that id into the Business user id field.
The Data Solutions key is rejected on ds_ tools
Why: Data Solutions is a separate paid Trustpilot product with its own console. Its key is not created on the Trustpilot APIs screen.
Fix: Generate the key inside the Data Solutions web app and paste that value, not the application API key.
Credentials stop working after a while
Why: The application was disabled or removed in Trustpilot Business.
Fix: Trustpilot does not rotate keys on a schedule, so the same pair stays valid until someone disables or removes the application. Check the toggle on Your applications, or create a new application and paste the new pair.
Reference
TikTok Shop
Connect TikTok Shop to manage products and inventory, work orders through shipping and tracking, handle returns and refunds, read settlements, and track shop performance.
Walmart Marketplace
Connect Walmart Marketplace to manage orders, items, inventory, prices, promotions, returns, feeds, reports, and repricer rules for your seller account.