OAuth

OAuth is an authorization protocol that allows applications to have limited access to the private information of Mercado Pago accounts, through the HTTP protocol that introduces an authentication and authorization layer in which you request access to the protected resources of sellers, through an access token limited to a particular application, without the need for the credentials of the sellers through the access flows.

The flows, also called grant types, refer to the way in which an application obtains an access token that allows accessing the data displayed through an API. In the case of Mercado Pago, there are two available access flows: authorization_code and refresh_token. In both flows, the main entities involved in the processes are:

Access token: code used in different requests of public origin to access a protected resource that represents an authorization granted by a seller to a client application that contains scopes and a limited period of time for such access.
Temporal grants: temporal codes used to exchange for an access token. Sound of type authorization_code and refresh_token.

Important

The use of the OAuth protocol differs from the shared use of credentials process. OAuth does not address questions related to client authentication, nor information related to that, its responsibility lies in the methods of obtaining a token to access a resource.

PCI DSS

Para operar con tarjetas se debe cumplir con el estándar de seguridad de la industria de pagos: PCI DSS.

Creación

Aprenda a crear un authorization_code para generar un access token.