Connect Amazon

Goal: Unlock automatic repricer, create listings with one click, access customer delivery addresses, sync catalog.

Time needed: 10 minutes (if your account is verified), up to 30 minutes (if you need additional verification).

What You Need Before Starting

• Seller Central account (Professional plan, not Individual)
• Be the primary account holder (not a sub-user)
• Access to your own Seller Central
• A web browser

Important note: Individual plan accounts cannot create SP-API applications. You'll need to upgrade to Professional.

Step-by-Step

1. Create a Private Application in Seller Central

1. Go to https://sellercentral.amazon.com
2. Click Apps and Services (in the main menu on the left)
3. Click Develop Apps
4. You'll see a developer dashboard. If this is your first time:
   • You may get a screen asking you to confirm you own the account
   • Follow the instructions (may ask for verification via SMS or email)

2. Create a New "App Client"

1. Click Add new app client (or Create App)
2. Fill out the form:

   Field	What to Enter
   App Name	"SellerForge WMS" or a name you prefer
   Type of Integration	"Seller" (if you sell your own products)
   Developer Type	"Private Developer: I build apps that integrate my own business with Amazon"
   API Type	"Selling Partner API (SP-API)"

1. DO NOT fill in "IAM ARN" — in 2026, private LWA-only applications do not need IAM ARN
2. Click Create / Next

3. Select Permissions (Roles)

You'll see a list of "roles" (permissions). Select all of these:

• ✓ Inventory and Order Tracking — to sync catalog, check inventory, track orders
• ✓ Pricing — to update prices and automatic repricer
• ✓ Product Listing — to create listings with one click
• ✓ Direct-to-Consumer Shipping (marked *Restricted*) — needed for shipping labels and customer address access
• ✓ Buyer Solicitation — optional (only if you want to request reviews from the system)

You may get a warning that "Direct-to-Consumer Shipping" requires answering a data protection questionnaire. This is normal. If it appears:

1. Click Review Data Protection Questionnaire
2. Answer honestly (basically: will you protect customer data?)
3. Amazon approves in a few days

1. After selecting roles, click Create / Authorize

4. Get the Refresh Token

After clicking "Authorize", you'll see a screen with:

Authorization Code: [long code]
Refresh Token: [very long code] ← THIS IS THE MOST IMPORTANT

IMPORTANT: This Refresh Token appears only once. If you close the page without copying it, you'll have to authorize the application again.

1. Copy the full Refresh Token (use Ctrl+C / Cmd+C)
2. Save it somewhere safe (you'll paste it in SellerForge WMS soon)
3. Click Done / Back

5. Find Client ID and Client Secret

Now you're back at the applications list. You'll see your "SellerForge WMS" application listed.

1. Click View next to the application name
2. Look for the LWA Credentials section
3. You'll see:
   • Client ID — copy this
   • Client Secret — click Show, then copy this

Important warning: The LWA Client Secret must be rotated every 180 days. Amazon will send email reminders. SellerForge WMS will also notify you when 30 days remain.

6. Find Your Seller ID

1. In Seller Central, click Settings (gear icon in the top right)
2. Click Account Info
3. Under Business Information, look for Your Merchant Token or Your Seller ID
4. Copy this code (it looks something like "ABCD1234E5FGH")

7. Connect in SellerForge WMS

1. In the SellerForge WMS app, go to Settings → Integrations
2. Click the Amazon card
3. Fill in the fields:
   • Client ID: Paste the Client ID from step 5
   • Client Secret: Paste the Client Secret from step 5
   • Refresh Token: Paste the Refresh Token from step 4
   • Seller ID: Paste the ID from step 6
   • Marketplace: Leave as "Amazon.com / ATVPDKIKX0DER" (default for USA)
4. Click Test Connection

Test the Connection

After clicking "Test Connection", the app will show:

• "Connection successful" → Amazon is connected! Data will start syncing
• "Error: Invalid Client ID" → Check that you copied correctly (no spaces)
• "Error: Invalid Refresh Token" → May have expired; go to Seller Central and click Authorize again
• "Error: Access Denied" → Roles were not selected correctly in step 3; fix them in Seller Central and click Authorize again

Troubleshooting

"Error: Access Denied" or "Unauthorized"

Cause: You selected too few roles when creating the application. Solution: In Seller Central, go to Apps and Services → Develop Apps, click your application, and click Edit to add more roles. Then click Authorize again and copy the new Refresh Token.

"Refresh Token Expired"

Cause: The Refresh Token was revoked (someone clicked *Revoke* in Seller Central, the app was edited, or Amazon invalidated it for security). It does not expire on its own from inactivity. Solution: In Seller Central, click Authorize again on the SellerForge WMS application. Copy the new Refresh Token and update it in SellerForge WMS.

"Error: Seller ID is incorrect" or inventory not syncing

Cause: You copied the wrong ID (could be marketplace ID, ASIN, etc.). Solution: Go back to step 6 and copy again from Settings → Account Info → Your Merchant Token. It starts with a letter (like "A" or "M").

Products are not syncing

Cause: First sync can take up to 30 minutes. Solution: Wait 30 minutes. If nothing appears after 1 hour, check if the Client Secret expired (needs rotation every 180 days).

"Error: Data Protection Questionnaire Required"

Cause: You selected "Direct-to-Consumer Shipping" but didn't answer the questionnaire. Solution: In Seller Central, look for the "Data Protection Questionnaire" notification and answer it. Amazon approval takes a few days.

I tried to create another application and it won't let me

Cause: You (or a former partner / old tool) already created an app client before. Solution: You can create a new one just for SellerForge WMS — every click on Authorize issues a new refresh token without invalidating earlier ones. Revoke apps you no longer use (verify on screen).

Security

Your Client ID, Client Secret, and Refresh Token are encrypted and stored only in your SellerForge WMS database.

No one from the SellerForge team can see this data.

• Client Secret must be rotated every 180 days — go to Seller Central, click your application, and click Rotate Client Secret. Then copy the new value and update it in SellerForge WMS.
• If any credential leaks, you can regenerate it in Seller Central without affecting customers (the Refresh Token stays valid).
• If you disconnect the integration in SellerForge WMS, the credentials are permanently deleted.

Next step: Connect eBay → (optional) or Connect Walmart → or Your First Day →

Official References:

• Amazon: Register SP-API Application
• Amazon: Getting Started for Private Developers
• Amazon: LWA Credential Rotation
• Amazon: SP-API Roles