Yoco APIAuthenticationOAuth 2.0

Setting up your applications

Before implementing OAuth 2.0 with Yoco, create and configure OAuth applications for both sandbox testing and live use.

Prerequisites

  1. Identify the OAuth 2.0 scopes your application requires.
  2. Apply for access to the Yoco API.

Application setup process

The Yoco API is in a closed beta.

To participate, complete the application form.

After approval, Yoco provides your OAuth 2.0 client ID and secret for the sandbox environment.

Live credentials are issued once your application is ready for production use.

Important considerations

  • Request only the scopes your application needs.
  • Redirect URLs must use HTTPS. An exception applies to localhost in the sandbox environment.
  • The redirect URL used in the authorization flow must match exactly the one provided in your application form.
  • Store the client secret securely in your application’s configuration.