# Trustpilot setup for PopMCP You end up pasting a Trustpilot API key and Secret key from one application in Trustpilot Business, plus the domain your company is listed under, and the business user id of an Admin or Manager if you want to send invitations. - Auth: API credentials - Setup time: 8 min - API base URL: https://api.trustpilot.com/v1 - Credentials screen: https://businessapp.b2b.trustpilot.com/applications - Provider docs: https://developers.trustpilot.com/ ## Approval required before this works Trustpilot must enable the paid API module on your Trustpilot for Business account before the Developer Portal will issue a working API key. The docs are explicit: "You must have a Trustpilot for Business account with access to the API module to access Trustpilot API data." - Typical wait: Not published by Trustpilot - the API module is sold, not reviewed, so the wait is however long the sales/CSM conversation takes (days to weeks). No vendor-stated SLA exists. - Cost: Paid. Trustpilot publishes plan pricing at business.trustpilot.com/plans: Starter from USD 99/month, Plus from USD 319/month per domain, Premium from USD 799/month per domain (all billed annually on a 12-month commitment), Enterprise on request. The API module itself is a separate add-on whose price Trustpilot does not publish; the docs only list its tiers - Tier 1 = 200,000 API calls/year, Tier 2 = 1,000,000, Tier 3 = unlimited - and state that Enterprise plans include Tier 1 plus unlimited invitations. - Blocked until approved: Every endpoint. Without the API module there is no Integrations > Developers > APIs screen in Trustpilot Business, so no API key (Client ID) or secret is ever issued and there is nothing to authenticate with. That covers the public read endpoints (business unit lookup, public reviews), the private endpoints (review management, replies, tags), and the invitation endpoints alike - the docs state the API key must be sent on every request even for the public API, so there is no anonymous read path. - Works meanwhile: The full API reference at developers.trustpilot.com is public, so request/response schemas, OAuth flow shape and endpoint paths can all be coded against. No call, sandbox included, can be executed without the module. ## Before you begin - Trustpilot Business account with a claimed profile for your domain - API access is included in Enterprise. On Premium it needs the API Module add-on, so it is not available on lower plans - Admin role in Trustpilot Business, since a 403 Forbidden on the private endpoints is almost always a missing admin right - For invitations only: the Trustpilot user you send on behalf of must have the Admin or Manager role - For the six ds_ tools only: a separate Trustpilot Data Solutions subscription, which has its own key ## Get your credentials ### 1. Open the Trustpilot APIs page Sign in at `businessapp.b2b.trustpilot.com` and go to Get reviews → Invitation methods. Scroll down, click Try a different way to get reviews, then click Trustpilot API. Screen: https://businessapp.b2b.trustpilot.com/applications ### 2. Create a new application Under Create a new application, enter a name such as `PopMCP` and enter the domains you want to use for redirect URIs, one per line. Click Create Application. Screen: https://businessapp.b2b.trustpilot.com/applications ### 3. Reveal and copy both keys Find the new row under Your applications and click the Eye icon to reveal the API key and the Secret. Click the copy icon beside each value and paste both into PopMCP. Screen: https://businessapp.b2b.trustpilot.com/applications ### 4. Enter the domain your company is listed under Paste your website URL or your Trustpilot profile link into PopMCP's Business domain field. Copy the domain exactly as it appears in your `trustpilot.com/review/...` URL. Screen: https://developers.trustpilot.com/business-units-api ### 5. Copy your business user id (invitations only) Go to Settings → Business settings → Users, open the profile of the Admin or Manager who will send invitations, and copy their id. Leave PopMCP's Business user id field blank if you are not sending invitations. Screen: https://developers.trustpilot.com/invitation-api ### 6. Add a Data Solutions API key (optional) Generate the key in the Data Solutions web app and paste it into PopMCP's Data Solutions API key field. Leave the field blank if you do not have that subscription. Screen: https://developers.trustpilot.com/ ## Fields PopMCP asks for - API Key (apiKey) [required]: Trustpilot Business → Integrations → API Access. Trustpilot also calls this the Client ID. Stored encrypted and used server-side only. - API Secret (apiSecret) [required]: The Secret shown beside the Key on the same API Access screen, sometimes labelled Client Secret. It must belong to the SAME application as the Key. This is what unlocks your private reviews, replies, and invitations. - Business domain (businessDomain) [required]: The domain your company is listed under on Trustpilot. Pasting your website URL or your Trustpilot profile link is fine; we trim it. If you already know your business unit id you can paste that instead. - Business user id (optional) (businessUserId): Only needed to send review invitations. Trustpilot requires the id of the Admin or Manager the invitation is sent on behalf of. Find it on that user's profile page in Trustpilot Business. - Data Solutions API key (optional) (dataSolutionsApiKey): Only for Trustpilot Data Solutions, a separate paid product with its own key generated in the Data Solutions web app. Leave blank and everything except the six ds_ tools still works. ## Verify PopMCP shows the Trustpilot connector as Connected and displays your business unit name, domain, current TrustScore and review count on the connector card. ## Troubleshooting ### 401 Unauthorized Cause: Trustpilot documents this as "Unauthorized. The request lacked valid authentication." and notes it is "often caused if the wrong authentication type is given with the request". In practice the API key and Secret were taken from two different applications. Fix: Go back to Get reviews → Invitation methods → Try a different way to get reviews → Trustpilot API, click the Eye icon on a single application row, and copy the API key and Secret from that one row. ### 403 Forbidden Cause: Trustpilot's error reference attributes this to admin rights or plan level. Fix: Trustpilot's own advice: "Make sure you have admin status and that you are signed up to the relevant Trustpilot plan." Ask an Admin to create the application, or add the API Module to your Premium plan. ### 404 on every business-unit call Cause: The domain entered is not the one the profile is listed under, for example example.com instead of www.example.com. Fix: Open your public Trustpilot profile and copy the domain exactly as it appears in the trustpilot.com/review/... URL. ### Invitations fail but reviews work Cause: The business user id is missing, or belongs to a user without the Admin or Manager role. Fix: Go to Settings → Business settings → Users, open an Admin or Manager profile, and paste that id into the Business user id field. ### The Data Solutions key is rejected on ds_ tools Cause: Data Solutions is a separate paid Trustpilot product with its own console. Its key is not created on the Trustpilot APIs screen. Fix: Generate the key inside the Data Solutions web app and paste that value, not the application API key. ### Credentials stop working after a while Cause: The application was disabled or removed in Trustpilot Business. Fix: Trustpilot does not rotate keys on a schedule, so the same pair stays valid until someone disables or removes the application. Check the toggle on Your applications, or create a new application and paste the new pair. --- Source: https://www.docs.popmcp.com/docs/integrations/trustpilot/