API management

The API Management page lets you create and configure third-party API clients. It's visible only to Authorized Service Administrators (ASAs). To integrate with a third-party client, create an API client in your MC Professional account and generate a unique Client ID and Client Secret for the client's developer.

Creating an API client

1. Navigate to Settings > Account Settings, then select API Management.
2. The page lists your API clients with the Client ID and Client Secret for each—the information a third-party developer needs to set up an integration. Hover over a client to Edit, Delete, or Regenerate Secret.

   

3. Select Create API Client, enter a name for the application, then select Create API Client again. The Client ID and Client Secret are generated automatically.

Configuring an API client

After you create a client, you're directed to its Settings page. To return later, hover over the client in your list and select Edit.

Under API Client Information, you can view the API client name, Client ID, and Client Secret, and edit the name. The Client ID and Client Secret are generated automatically; to replace the secret, see Regenerating the client secret.

Under Permission Scope, select the scopes the client is authorized to use. All API tokens have Read enabled. To make updates through the API, select Write.

Selecting authorized grant types

Under Authorized Grant Types, select which grant types the client is authorized to use. For a description of each, see API authorization. The options are: Authorization Code, Implicit, Resource Owner Password Credentials, Client Credentials, and Refresh Token.

Configuring redirect URIs

If you select the Authorization Code or Implicit grant type, add at least one redirect URI. A redirect URI must be properly formatted and start with http:// or https://, and is provided by the third-party client's developer.

• Adding a redirect URI: Enter the URI in the Add a Redirect URI field, then select Add URI.
• Editing a redirect URI: Hover over the URI, then select Edit. To remove one, select Delete.

If the Client Credentials grant type is enabled, select the groups to associate with the access token issued through it. The token has the cumulative permissions of all selected groups.

Deleting an API client

Navigate to the API Management page, hover over the API client, and select Delete. In the pop-up, confirm it's the correct client, then select Delete API Client.

Regenerating the client secret

Navigate to the API Management page, hover over the API client, and select Regenerate Secret. Confirm it's the correct client, then select Regenerate.