Skip to main content

Create Application Client

note

This endpoint is for merchants with a Partner account. To activate a Partner account, contact us.

Create a new application client for a merchant under your Partner account. An application client contains the clientId and clientSecret used for OAuth authentication with the RM API.

When to Use

Use this endpoint when:

  • A new application needs to be registered for a merchant
  • Setting up OAuth credentials for a merchant's integration

How to Use

Endpoint
POST/v3/partner/merchant/{merchantId}/application

Step 1: Get the Merchant ID

Locate the merchantId for the merchant you want to create an application for. You can get this from the Get Merchants endpoint.

Step 2: Prepare Application Details

Gather the required information:

  • Application name
  • Homepage URL, logo URL, and privacy policy URL
  • Redirect URIs for OAuth
  • RSA public key in PEM format

Step 3: Make the POST Request

Send the application details with the merchantId as a path parameter.

Step 4: Store the Credentials

In the response, note the clientId and clientSecret. These are needed for OAuth authentication and cannot be retrieved again later.


Request Parameters

Pass the merchantId as a path parameter in the URL.

userIdSTRINGrequired

The user ID associated with this application.

Example: "1647501978916382207"

nameSTRINGrequired

Name of the application.

Example: "required name"

homePageUrlSTRINGrequired

URL of the application's homepage.

Example: "https://google.com"

logoUrlSTRINGrequired

URL of the application's logo.

Example: "https://google.com"

privacyPolicyUrlSTRINGrequired

URL of the privacy policy page.

Example: "https://google.com"

redirectUriARRAYrequired

Allowed redirect URIs for OAuth. Must exactly match URIs registered in the Merchant Portal.

Example: ["https://google.com"]

publicKeySTRINGrequired

Your application's RSA public key for JWT authentication. Wrap in PEM format.

Example: "-----BEGIN PUBLIC KEY-----\n...\n-----END PUBLIC KEY-----"

isActiveBOOLEAN

Whether the application is active. Defaults to true if not provided.

Example: true


Response Parameters

itemOBJECT

Contains the created application client details including clientId and clientSecret.

clientIdSTRING

Unique client identifier for this application. Use this in your OAuth requests.

Example: "1647502414730379278"

clientSecretSTRING

Client secret. Keep this confidential and never expose it in client-side code.

Example: "dtbDsFgbLDzGhMleKjTFZXGxrDKFnMqe"

clientOBJECT

Application client keys

publicKeySTRING

Your application's public key.

Example: (PEM format)

serverOBJECT

RM server keys

publicKeySTRING

RM's server public key.

Example: (PEM format)

privateKeySTRING

RM's server private key (for your reference only).

Example: (PEM format)

nameSTRING

Application name.

Example: "required name"

homePageUrlSTRING

Homepage URL.

Example: "https://google.com"

logoUrlSTRING

Logo URL.

Example: "https://storage.googleapis.com/rm-sandbox-asset/img/default-application-logo.png"

privacyPolicyUrlSTRING

Privacy policy URL.

Example: "https://google.com"

merchantIdSTRING

Merchant ID this application belongs to.

Example: "1647501978894816174"

userIdSTRING

User ID who created this application.

Example: "1647501978916382207"

oAuthClientProductsARRAY

OAuth client products.

Example: []

isActiveBOOLEAN

Whether the application is active.

Example: false

redirectUriARRAY

Allowed redirect URIs.

Example: ["https://google.com"]

createdAtDATETIME

Creation date time of the application.

Example: "2022-03-17T07:33:34Z"

updatedAtDATETIME

Last update date time of the application.

Example: "2022-03-17T07:36:10Z"

codeSTRING

"SUCCESS" if the call succeeded. Otherwise returns an error code object. See Appendix 1: Error Codes.

Example: "SUCCESS"