Amazon Services
Amazon Marketplace Web Service (Amazon MWS) Documentation
Amazon MWS Documentation

Registering to use Amazon MWS

Amazon MWS is a secure environment that uses signatures for authentication and lets sellers delegate calling rights to developers by using the Amazon MWS authorization service. To use Amazon MWS, you must have an Amazon MWS-eligible seller account and you must register for Amazon MWS on the User Permissions page in Seller Central.

Amazon MWS-eligible seller accounts

To be eligible to use Amazon Marketplace Web Service (Amazon MWS), you must have at least one of the following Amazon accounts:

  • Non-individual Amazon seller
  • Amazon Payments
  • Amazon Fresh
  • Amazon Business
  • Amazon Prime Now

Registering as a developer

To develop Amazon MWS applications you must first register as a developer:

  1. Go to the User Permissions page in Seller Central and log into your Amazon seller account as the primary user.
  2. In the Amazon MWS Developer Permissions section, click the Register as a Developer button.
  3. Select I will not share my Secret Key or my AWS Access Key with anyone, and then click Next.

    Your developer account identifier and credentials appear. You can access these at any time on the User Permissions page in Seller Central.

Using your developer account identifier and credentials

The following is an example of the developer account identifier and credentials you receive when you register as a developer:
  • Developer ID (a 12-digit identifier): 1234-3214-4321
  • AWS Access Key ID (a 20-character, alphanumeric identifier): 022QF0EXAMPLEH9DHM02
  • Secret Key (a 40-character identifier): kWcrlEXAMPLEM/LtmEENI/aVmYvHNif5zB+d9+ct

If you are developing an Amazon MWS web application or providing Amazon MWS-related development services to sellers, you must provide your Developer ID to those sellers so that they can authorize you to access their Amazon seller accounts with Amazon MWS.

Note: If you are developing an Amazon MWS desktop application, do not embed your credentials in the application. Instead, have the users of your application register as a developer to get their developer credentials. Users of your desktop application should use their own developer credentials when submitting requests to Amazon MWS. For more information, see I have developed a desktop application. How do sellers use it? in the "Frequently Asked Questions" section.

The Access Key ID is associated with your Amazon MWS registration. You include it in all Amazon MWS requests to identify yourself as the sender of the request. The Access Key ID is not a secret. To provide proof that you truly are the sender of the request, you must also include a digital signature. For all requests except those generated using the Amazon MWS client libraries, you calculate the signature using your Secret Key. Amazon uses the Access Key ID in the request to look up your Secret Key and then calculates a digital signature with the key. If the signature Amazon calculates matches the signature you sent, the request is considered authentic. Otherwise, the request fails authentication and is not processed.

Important: Your Secret Key is a secret that only you and Amazon should know. It is important to keep it confidential to protect your account. Never include it in your requests to Amazon MWS, never embed it in a desktop application, and never e-mail it to anyone. Do not share it outside your organization, even if an inquiry appears to come from Amazon MWS or anyone else at Amazon. No one who legitimately represents Amazon will ever ask you for your Secret Key.

Resetting your AWS Access Key ID and Secret Key

If you need to change your AWS Access Key ID and Secret Key, contact Seller Support in your home marketplace via chat, telephone, or Contact Amazon MWS form and ask to reset your AWS Access Key ID and Secret Key. If you use the form, provide the following information:

  1. For Subject, enter "Reset access keys to my Amazon MWS account".
  2. For Your comment, enter "Please reset the AWS Access Key ID and Secret Key for my account."

You will receive a reply from the Seller Support team with a link to the User Permissions page on Seller Central, where you can generate a new key pair for your account. Only administrators can use the link to create new keys.

Note: When Seller Support deletes your key pair, all applications that use your current keys will be denied access to your account information until you update those applications with your new keys.

Authorizing a developer

A seller must authorize a developer to make calls to Amazon MWS on their behalf. Here is the process:

  1. The developer must be a registered Amazon MWS developer. See Registering as a developer.
  2. The developer gives the seller their Developer ID.
  3. The seller goes to the User Permissions page in Seller Central and logs into their Amazon seller account as the primary user.
  4. The seller clicks the Authorize a Developer button.
  5. In the Developer's Name text box, the seller enters the name of the developer to whom they are giving access. This doesn't need to be the exact name; it is merely for the seller's reference in the future.
  6. In the Developer Account Number text box, the seller enters the Developer ID that the developer gave them in Step 1, and then clicks Next.
  7. The seller selects the box to confirm that they want to give the developer access to their Amazon selling account, and then clicks Next.

    The seller's account identifiers and MWS Auth Token appear.

  8. The seller gives the developer their Seller ID and MWS Auth Token so the developer can make calls on the seller's behalf.

Revoking developer access to an Amazon selling account

A seller can revoke developer access to their Amazon selling account using the User Permissions page in Seller Central. Here is the procedure:

  1. The seller goes to the User Permissions page in Seller Central and logs into their selling account as the primary user.
  2. In the Amazon MWS Developer Permission section, the seller views the list of developers who are currently authorized to access their selling account.
  3. The seller clicks Revoke access for the developer whom they want to revoke access to their selling account.