Applies to: Mobile Authorization API | Reader SDK | In-App Payments SDK | OAuth API
Use the Mobile Authorization API to initialize Square mobile solutions to accept payments.
The Mobile Authorization API accepts an account credential (OAuth token or personal access token) and location ID and returns an authorization code that custom mobile applications can use to initialize Square mobile solutions like the Reader SDK to accept payments using Square hardware.
The Mobile Authorization API accepts requests through HTTPS and TLS 1.2. Connections through HTTP aren't supported.
The Mobile Authorization API isn't supported in the Square Sandbox. For alternative recommendations, see Testing for supported countries.
The authorization service uses PHP version 5.4 or later. PHP is used for the example code because it's a common web language and relatively approachable for new developers. However, Square APIs are language agnostic and the setup steps are comparable across languages.
The authorization service uses the Square PHP SDK. Installing the SDK is optional. As long as you can package and receive JSON messages, you can use Square APIs, but installing the SDK makes things easier.
Note
The Reader SDK is currently the only Square mobile solution that requires a mobile authorization flow. The In-App Payments SDK isn't initialized with an authorization code and therefore doesn't use the Mobile Authorization API.