Every API request, except the token request itself, needs an Authorization
header:
Get a token
Send your Archer username and password as application/x-www-form-urlencoded:
The response includes access_token. Tokens are valid for 1440 minutes
(24 hours) from issue — fetch a new one after that.
Call the API
Pass the token as a bearer token:
If a call returns 401, fetch a fresh token and retry.
Affiliate vs. seller access
The same token flow is used for both API surfaces. Your account determines
which endpoints you can call:
- An affiliate account can call the Affiliate API endpoints.
- A seller account can call the Seller API endpoints under
/sellers/....