I am a Square merchant and my website developer is integrating Square with my business website. They have asked me to provide the required Square developer/API information for the integration.
I have logged into my Square Developer Dashboard and attempted to locate the required credentials, but I am unsure exactly which information my developer needs and where I should retrieve it.
Could someone please guide me through where to find the correct credentials/information needed for a website Square payment integration, and which items are safe to provide to my developer?
I want to make sure I do not accidentally share any sensitive credentials publicly.
Your developer will need your Application ID and Location ID. These identify your Square application and business location and are safe to provide directly to your developer.
The integration will also need a Production Access Token to process real payments. This token is essentially a password that gives broad access to your Square account.
Do not post the Production Access Token here or place it in website code that visitors can see. If possible, do not send it by email or chat either. Ask your developer to show you where to enter it securely in your website host’s private settings. It should be stored as a secret or environment variable and used only by the website’s server.
If the developer hosts or operates the payment integration on their own systems, or uses the same integration for several Square merchants, they should use OAuth instead. That lets you connect your Square account without giving them your Production Access Token directly.
If you have any further questions, feel free to share this directly with your developer and have them ask questions directly here!