Seller Authorizations FAQ

Authorization is the process by which a selling partner grants your Selling Partner API (SP-API) application permission to call the SP-API on the selling partner's behalf. For example, when a selling partner authorizes your order management application, they give your application permission to retrieve their order data through the SP-API. To learn more about authorization, refer to Authorize Applications.

SP-API applications have authorization limits based on the selling partner type your application supports. To learn more about the limits, refer to Authorization Limits.

This can happen for several reasons:

1. As part of data-access maintenance, Amazon periodically deactivates application authorizations that have not been renewed by the seller in more than 365 days and have not made an API call within this time frame. Sellers can reactivate at any time through their Manage Your Apps page in Seller Central. To learn more about renewing authorizations, refer to Reactivate Authorizations.

2. Sellers can voluntarily revoke authorization of SP-API applications they no longer want connected to their account. To learn more about revoking authorizations, refer to Revoke Authorizations.

As part of data-access maintenance, Amazon periodically deactivates SP-API application authorizations that have not been renewed by the seller in more than 365 days and have not made an API call within this time frame. This protects seller data by ensuring third-party access remains aligned with actual usage. This is a core principle of Amazon's data security practices.

Two principles drive this:

• Seller data protection - If a seller is no longer actively using your SP-API application, their data should not remain accessible. Removing outdated authorizations closes that unnecessary exposure.

• Least-privilege access - Permissions should reflect real activity. An authorization with no business need for the seller serves no functional purpose. Removing it keeps access scoped to what is in use.

When a seller reauthorizes your SP-API application, your application needs to correctly exchange parameters with Amazon and receive updated authorization information. If your reauthorization workflow is not set up correctly, sellers might lose access to your SP-API application when they attempt to reconnect. Test your reauthorization workflow to ensure a seamless experience.

For test scenarios and steps, refer to Test your reauthorization workflow.

No. Amazon only deactivates authorizations that have not been renewed by the seller in over 365 days and have received zero API calls within that time frame. Your SP-API application was not actively using those connections, so nothing in your integration breaks.

What is unaffected:

• Live API calls and active integrations.
• Any authorization where at least one API call was made in the past 365 days.
• Your SP-API application's credentials, client ID, or OAuth configuration.

No. Amazon only deactivates authorizations that have not been renewed by the seller in over 365 days and have received zero API calls within that time frame. Sellers whose authorizations Amazon deactivated were not actively using your SP-API application. They might see fewer "active" applications within their Manage Your Apps page in Seller Central, but no active workflow is interrupted.

Sellers can follow the steps provided in Reactivate Authorizations.

No. Deactivation of an SP-API application authorization is a technical action that removes SP-API data access only. It has no bearing on any service contracts, subscription agreements, or financial arrangements between you and your sellers. If the seller wishes to reactivate, they can follow the steps provided in Reactivate Authorizations.