Requesting API Access
How to request API credentials for PartsSource APIs
To use the PartsSource APIs, you need OAuth 2.0 client credentials. This guide explains how to request access and what to expect.
What You'll Receive
After approval, you'll receive:
Before requesting access, ensure you have:
Request Process
Reach out to your PartsSource account manager or contact [email protected] to initiate the API access request.
Include in your request:
Company name and account information
Integration use case description
Technical contact name and email
Preferred environment(s): Production, QA, or both
Review and Approval
Our team will review your request and may ask clarifying questions about:
Security measures in place
Typical review time: 5-10 business days
Receive Credentials
Upon approval, you'll receive your credentials via secure channel:
Client ID and Client Secret
Environment-specific endpoints
Any usage guidelines or restrictions
Store your client secret securely. It cannot be recovered if lost - you'll need to request new credentials.
Environment Access
You can request access to different environments:
Security Requirements
To maintain API access, you must:
Credential Security
Store credentials in secure secret management systems
Never commit credentials to source control
Rotate credentials if compromise is suspected
Use separate credentials for each environment
Integration Security
Use HTTPS for all API communication
Implement proper error handling
Follow rate limiting guidelines
Log correlation IDs for debugging
Only access data your integration requires
Comply with data handling agreements
Report any security incidents promptly
Credential Rotation
If you need to rotate credentials (suspected compromise, security policy, etc.):
Update your integration with new credentials
Confirm old credentials should be revoked
Credential revocation is immediate. Ensure your integration is updated before requesting revocation of old credentials.
Multiple Integrations
If you have multiple applications or services that need API access:
Recommendation: Use separate credentials for each distinct integration to:
Isolate access if one is compromised
Track usage per integration
Apply different rate limits if needed
For questions about API access:
When contacting support, include:
Environment (QA/Production)
Description of issue or request
