# MD for: https://www.mercadopago.com.mx/developers/en/docs/wallet-connect-legacy/additional-content/your-integrations/credentials.md

\# Credentials Credentials are unique access keys that identify an integration in your account. They are linked to the :toolTipComponent\[application\]{link="/developers/en/docs/your-integrations/application-details" linkText="View integration data" content="Entity registered in Mercado Pago that identifies an integration and stores its settings and credentials."} you created for your integration. How you obtain and manage them varies depending on the integrated product. :::::TabsComponent ::::TabComponent{title="Checkout API and Checkout Pro with Orders"} ## Types of credentials Credentials are divided into \*\*test credentials\*\* and \*\*production credentials\*\*. Use the credentials for the environment in which you are working, and replace them only when moving from testing to production. ### Test credentials \*\*Test credentials\*\* let you configure and validate the integration without processing real payments. They are created automatically with the application. To view them, follow these steps: 1\. Go to \[Integrations\](https://www.mercadopago.com.mx/developers/panel/app) and select the application. 2\. Select \*\*Test\*\* in the environment selector at the top of the screen. 3\. Access the credentials in either of the following ways: \* In \*\*Home\*\*, locate the \*\*Credentials\*\* block. \* In the side menu, select \*\*Credentials\*\*. In both cases, you will find the \*\*Public Key\*\* and \*\*Access Token\*\* for the test environment, with options to copy them. | Type | Description | |---|---| | Public Key | Public key used in the \_frontend\_ to initialize the integration and protect the data sent to Mercado Pago. | | Access Token | Private key used in the \_backend\_ to authenticate requests to Mercado Pago APIs. It must never be shared or exposed in the \_frontend\_. | For these integrations, the test \_Access Token\_ starts with the \`APP\_USR\` prefix. Before copying a credential, verify that the selector displays the \*\*Test\*\* environment. On the \*\*Credentials\*\* screen, you will also find a separate block with the test account details and an option to manage it. !\[Access credentials from Home and the side menu\](/images/dashboard/credentials-access-es-v1.png) ### Production credentials \*\*Production credentials\*\* let you process real payments. Before using them, you must activate the application's production environment. To activate the production environment and obtain the credentials, follow these steps: 1\. Go to \[Integrations\](https://www.mercadopago.com.mx/developers/panel/app) and select the application. 2\. Click \*\*Credentials\*\* in the side menu. 3\. Select \*\*Production\*\* in the environment selector and click \*\*Activate production environment\*\*. 4\. Enter your business sector and website. 5\. Accept the \[Privacy Statement\](https://www.mercadopago.com.mx/privacidad) and the \[Terms and Conditions\](https://www.mercadopago.com.mx/developers/en/docs/resources/legal/terms-and-conditions). Then, click \*\*Activate\*\*. After activating the environment, you will find the production credentials available for the application: \*\*Public Key\*\*, \*\*Access Token\*\*, \*\*Client ID\*\*, and \*\*Client Secret\*\*. Replace the test Public Key and Access Token with the production credentials before processing real operations. !\[Application production credentials\](/images/dashboard/credentials-production-es-v1.png) The \*\*Public Key\*\* and \*\*Access Token\*\* are used to integrate payments. The \*\*Client ID\*\* and \*\*Client Secret\*\* are mainly used in integrations that implement \[OAuth\](https://www.mercadopago.com.mx/developers/en/docs/security/oauth), especially through the \_Client Credentials\_ flow. | Type | Description | |---|---| | Public Key | Public key linked to an application and used in the \_frontend\_ to initialize the integration during real transactions. | | Access Token | Private production key used in the \_backend\_ to authenticate requests to Mercado Pago APIs. It must never be shared or exposed in the \_frontend\_. | | Client ID | Unique identifier that represents the application in integrations that implement OAuth. | | Client Secret | Private key used with the Client ID to authenticate the application. It must never be shared or exposed in the \_frontend\_. | Before copying a credential, verify that the selector displays the \*\*Production\*\* environment. ## Share credentials If someone else is helping you integrate Mercado Pago products, you can securely share the application's credentials with them. To start the process, follow these steps: 1\. Go to \[Integrations\](https://www.mercadopago.com.mx/developers/panel/app), select the application, and click \*\*Credentials\*\* in the side menu. 2\. Select the \*\*Test\*\* or \*\*Production\*\* environment. 3\. In the \*\*Share credentials with a developer\*\* section, click \*\*Share credentials\*\*. You can undo this action by removing the account that received the credentials and renewing them. :::: ::::TabComponent{title="Other products"} ## Types of credentials Credentials are divided into two types: \*\*test credentials\*\* and \*\*production credentials\*\*. Below, we explain what they are about. ### Test credentials Test credentials are a set of keys that are used both in the development stage, to ensure secure settings, and in the testing stage, to test the integration. During the integration process, use \*\*test credentials\*\* to perform all necessary configurations and validations, ensuring that no real payments are made in production. These credentials simulate the information of a production account, but in a secure testing environment. Keep using test credentials throughout the entire development phase. Only change them to production credentials when the system is completely validated and ready to be published. > NOTE > > If you are developing for someone else, they will need to request access to the credentials of applications you do not manage. See the \*\*Share credentials\*\* section for more information. When you create an application, the test credentials will be generated automatically. If this does not happen, simply click on \*\*Activate credentials\*\* in the data of the respective application or as indicated below. 1\. In \[Your integrations\](https://www.mercadopago.com.mx/developers/panel/app), select your application. Then, go to the \*\*Tests\*\* section and click on \*\*Test Credentials\*\* in the menu on the left side of the screen. 2\. Accept the \[Privacy Statement\](https://www.mercadopago.com.mx/privacidad) and the \[Terms and Conditions\](https://www.mercadopago.com.mx/developers/en/docs/resources/legal/terms-and-conditions). Fill in the reCAPTCHA and click on \*\*Activate credentials\*\*. !\[activate test credentials\](/images/snippets/credentials/activate-credentials-tests-EN.png) When accessing the test credentials, the \*\*Public Key and Access Token\*\* credential pair will be displayed. ### Public Key and Access Token The test \*\*Public Key\*\* and \*\*Access Token\*\* credentials are used in the same way as production credentials, but will not allow any real transactions to be made. In some integrations, they will be required during the development stage to simulate transactions and verify that your integration works correctly. | Type | Description | |---|---| | Public Key | The application's public key is generally used in the frontend. It allows, for example, access to information about payment methods and encrypt card data. | | Access Token | Application's private key that should always be used in the backend to generate payments. It is essential to keep this information safe on your servers. | ### Production credentials \*\*Production credentials\*\* are a set of keys that allow you to receive real payments in stores and other applications. To obtain production credentials, you must \*\*activate them\*\* by completing some information about your business. Follow the steps below: 1\. Go to \[Your integrations\](https://www.mercadopago.com.mx/developers/panel/app) and select an application. 2\. Go to the \*\*Production\*\* section in the left side menu and click on \*\*Production credentials\*\* in the menu on the left side of the screen. 3\. Accept the \[Privacy Statement\](https://www.mercadopago.com.mx/privacidad) and the \[Terms and Conditions\](https://www.mercadopago.com.mx/developers/en/docs/resources/legal/terms-and-conditions). Fill in the reCAPTCHA and click on \*\*Activate credentials\*\*. When accessing production credentials, the following credential pairs will be displayed: \*\*Public Key and Access Token\*\*, as well as \*\*Client ID and Client Secret\*\*. !\[Cómo acceder a las credenciales a través de Tus Integraciones\](/images/snippets/credentials-prod-panel-es-v2.jpg) ### Public Key and Access Token The \*\*Public Key\*\* and \*\*Access Token\*\* credentials are used, not necessarily together, in integrations made with Mercado Pago payment solutions. They are directly linked to the :toolTipComponent\[application\]{content="Entity registered in Mercado Pago that identifies an integration and stores its settings and credentials."} you created, so each credential pair is unique for each integration. | Type | Description | |---|---| | Public Key | The application's public key is generally used in the frontend. It allows, for example, access to information about payment methods and encrypt card data. | | Access Token | Application's private key that should always be used in the backend to generate payments. It is essential to keep this information safe on your servers. | For more information on which credentials will be needed for your integration, see the \[documentation\](https://www.mercadopago.com.mx/developers/en/docs) of the solution being integrated. ### Client ID and Client Secret The \*\*Client ID\*\* and \*\*Client Secret\*\* credentials are used primarily in integrations that use \[OAuth\](https://www.mercadopago.com.mx/developers/en/docs/security/oauth) as a protocol for obtaining private information from Mercado Pago accounts. In particular, they are used during the \*\*Client Credentials\*\* flow (\_grant type\_), which allows you to access a resource on your own behalf and obtain an Access Token without user interaction. They may also be required in some older integrations with e-commerce platforms. | Type | Description | |---|---| | Client ID | Unique identifier that represents your integration. | | Client Secret | Private key used in some plugins to generate payments. It is extremely important to keep this information secure on your servers and not allow access to any user of the system or intruder. | ## Share credentials If you are developing for someone else or receiving help in the integration or configuration of your stores, you can securely share the credentials with another Mercado Pago account. You can share credentials \*\*up to a maximum of 10 times\*\*. If you reach this limit, you must delete old permissions, without impacting already configured integrations. In addition, if for security reasons you no longer want to share your credentials, you can cancel access. Below, we show you how to share credentials. 1\. In the upper right corner of \[Mercado Pago Developers\](https://www.mercadopago.com.mx/developers/panel/app), click \*\*Log in\*\* and enter the required data with the information corresponding to your Mercado Pago account. Then, click on the \*\*Your integrations\*\* button located in the upper right corner. 2\. Access the application of the integration for which you need to share the credentials. 3\. Go to the \*\*Testing\*\* or \*\*Production\*\* section, depending on the type of credential you want to share. Remember that to access production credentials, you must activate them. To activate them, follow the \*\*Production credentials\*\* instructions on this page. 4\. Once you select the credentials, go to the \*Share credentials with a developer\* section and click on the \*\*Share Credentials\*\* button. 5\. Enter the email address of the person you want to grant access to. \*\*Remember\*\*: it is mandatory that the email address is associated with a Mercado Pago account. !\[Compartir credenciales en Tus Integraciones\](/images/snippets/share-credentials-panel-es-v1.jpg) ## Renew credentials You can renew your \*\*production credentials\*\* for security reasons or any other relevant reason. > WARNING > > Renewing credentials already configured in an integration will affect its operation. It is necessary that \*\*you replace the old credentials with the ones obtained\*\* after the renewal process to continue operating. To renew a credential pair, follow the steps below. 1\. Access your production credentials through \[Your integrations\](https://www.mercadopago.com.mx/developers/panel/app). 2\. Select the credential pair you want to renew. These can be \*\*Public Key\*\* and \*\*Access Token\*\* or \*\*Client ID\*\* and \*\*Client Secret\*\*. Keep in mind that both credentials in the pair you choose will be renewed. 3\. Click on the three dots located to the right of the credential you want to renew and select \*\*Renew\*\*. Click on \*\*Renew now\*\* to confirm the change. !\[Cómo renovar tus credenciales\](/images/snippets/renew-credentials-es-v1.jpg) Done, your credentials have been renewed. :::: :::::