Skip to content
snapcasterDevelopers

Credentials and sandbox

The Marketplace API key and Signing secret move in opposite directions and have different scopes.

CredentialScopeDirectionProvisioning
Marketplace API key (mp_{sellerCode}_{hex})Per SellerInbound calls from your PlatformThe Seller generates it in production; Snapcaster provisions it in sandbox
Signing secret (HMAC-SHA256)Per Platform and environmentOutbound webhooks from SnapcasterSnapcaster provides it through an authenticated confidential channel arranged during onboarding
Two credentials moving in opposite directionsA Seller API key authenticates calls from a Platform to Snapcaster, while a Platform Signing secret verifies webhooks from Snapcaster.Platformone integration backendSnapcasterMarketplace APIMarketplace API keyinbound, per SellerSigning secretoutbound, per Platform

There is no platform-level inbound key. Every API request is authenticated with the relevant Seller’s Marketplace API key, and the key identifies that Seller without a seller id parameter.

One-time Platform onboarding

Section titled “One-time Platform onboarding”

Email info@snapcaster.gg to initiate Platform creation, choose its orders, inventory, or both Subscription, and register its webhook endpoint. Snapcaster provisions and rotates the Signing secret through an authenticated confidential channel arranged with your team. Never send a Signing secret by email. Endpoint changes, Subscription changes, and Signing-secret rotation are operator-run today.

Per-Seller production setup

Section titled “Per-Seller production setup”
  1. The Seller creates a Snapcaster Seller profile.
  2. The Seller generates a Marketplace API key and pastes it into your Platform.
  3. Your Platform pushes Listings and confirms them with GET /me and GET /listings.
  4. The Seller completes Shipping option, payout, Terms, tax, Canadian-origin, and authenticator requirements so matched Listings can enter Browse.

Sandbox guarantees

Section titled “Sandbox guarantees”

The sandbox base URL is https://api-sandbox.snapcaster.ca/api/v1/marketplace. It is a dedicated environment behind the branded Snapcaster edge and receives only commits production has already run.

Your provisioned Platform, Seller, Marketplace API key, and webhook endpoint persist indefinitely. The sandbox is never reset. Its Canonical Catalog is a fixed fixture set, and the known-good skuId and productId sent with your credentials always resolve. The money path uses Stripe test mode, so no real card is charged and no real payout is made.

The sandbox is best-effort and has no uptime SLA. Do not send production traffic or live credentials to it. For provisioning, incidents, endpoint changes, or to initiate Signing-secret rotation, email info@snapcaster.gg.

Need help?

Email Marketplace support with this page and the sandbox environment prefilled.

Never include an API key or Signing secret in the message.