Application Authentication

How to use Application Authentication with the Pinch API

Previously, to use the Pinch API you used the Merchant Id and Secret Key which meant full access to the merchant account. We have added Applications as an alternate method of authentication where you can create multiple applications with separate API keys to help keep your merchant account more secure.

To get started with Application Authentication head over to the API Keys section in the portal, create a new application and use the Application Id and Secret in place of your Merchant Id and Secret when requesting an access token.

This change is to help unlock better API features in the future such as:

  • Improved Visibility - Applications will help give better visibility over where Payments are coming from or how a Payer record was created.
  • Multi-Merchant consent - Applications will be used as a way for merchants to opt into giving integrations access to their account without the need to pass on API keys and secrets to integrations or requiring Managed Merchant creation.

What’s Next