2.Authorization

❗️

Caution

Since all integration operations can be done through API information, your API key information should not be shared on any open platform (github, gitlab etc.)

Requests to integration services should be authorized with basic authentication method.

supplierid, API KEY and API SECRET KEY information used for Basic Authentication should be obtained from the "Entegrasyon Bilgileri" page under "Hesap Bilgilerim" in the seller panel.

• API key information is unique for each supplierId.
  Authentication information changes in the prod and stage environment. The information should be revised according to the endpoint and environment used.
  In case of wrong authorization, the message status: 401 , "exception": "ClientApiAuthenticationException" will return.

Using Auth and User-Agent

All requests to Trendyol Partner API must have Auth and User-Agent information in the Header. Requests that do not send User-Agent information will be blocked with a 403 error.

If working with an intermediary company as User-Agent information, "Seller Id - {Integration Company Name}", if the integration software belongs to the company, "Seller Id - Self Integration" should be sent.

• Please send your integrator company name in alphanumeric characters with a maximum of 30 digits.
  Example 1 :
  • sellerId: 1234
    • Integrator company name: TrendyolSoft
      • User-agent information to be sent: "1234 - TrendyolSoft"
        
  Example 2 :
  • sellerId : 4321
    • If there is no integrator company, The software belongs to the company.
      • User-agent information to be sent: "4321 - SelfIntegration"

Trendyol API Services Request Limitation

You can send a maximum of 50 requests to the same endpoint within 10 seconds for all requests you make to the Trendyol Partner API. The moment you try the 51st request, you will receive the error "429 status code and it say too.many.requests".