Skip to main content
On Adobe Commerce and Magento Open Source 2.4.4 and later, integration access tokens are rejected as bearer tokens unless an admin sets Allow OAuth Access Tokens to be used as standalone Bearer tokens to Yes. Without this setting every request fails with 401 Unauthorized.

​
Allow integration tokens as bearer tokens

Adobe Commerce 2.4.4 and later disable standalone bearer use of integration tokens by default. Enable it once for your store.

1

Change the OAuth consumer setting

Sign in to the Adobe Commerce Admin as an administrator.

  • Go to Stores > Configuration > Services > OAuth.
  • Expand Consumer Settings.
  • Set Allow OAuth Access Tokens to be used as standalone Bearer tokens to Yes.
  • Click Save Config.
  • If you manage configuration from the command line, run bin/magento config:set oauth/consumer/enable_integration_as_bearer 1 and flush the cache instead.

​
Create and activate an integration

An integration grants API access to the resources you select and generates the Access Token you enter below.

1

Add the integration

On the Admin sidebar, go to System > Extensions > Integrations and click Add New Integration.

  • Enter a Name, for example StackOne, and optionally an Email.
  • Leave Callback URL and Identity link URL empty.
  • Under Current User Identity Verification, enter your Admin password in Your Password.
2

Grant API resources

Enables actions: Add Item To Cart, Add Order Comment, Cancel Order, Create Cart, Create Cart Price Rule, Create Category, Create Credit Memo (Refund), Create Customer Group, Create Invoice, Create Product, Create Shipment, Delete Cart Price Rule, Delete Category, Delete Coupon, Delete Customer, Delete Customer Group, Delete Product, Generate Coupons, Get CMS Block, Get CMS Page, Get Cart, Get Cart Price Rule, Get Category, Get Credit Memo, Get Customer, Get Customer Group, Get Invoice, Get Order, Get Product By SKU, Get Shipment, Get Stock Status, List CMS Blocks, List CMS Pages, List Cart Price Rules, List Categories, List Coupons, List Credit Memos, List Customer Groups, List Customers, List Invoices, List Orders, List Products, List Shipments, List Source Items, List Store Configurations, List Store Groups, List Store Views, List Tax Classes, List Tax Rates, List Tax Rules, List Websites, Remove Cart Item, Send Invoice Email, Update Cart Item, Update Cart Price Rule, Update Category, Update Customer, Update Customer Group, Update Product, Update Source Items

In the left panel, click API.

  • Set Resource Access to All to allow every action in this connector.
  • Or choose Custom and select only the resources you need, such as Catalog, Customers, Sales, Stores and Marketing. Actions that use a resource you did not select return 401 Unauthorized.
  • Click Save.
3

Activate and copy the Access Token

On the Integrations grid, find the new integration (status Inactive) and click Activate.

  • In the upper-right corner, click Allow. The Integration Tokens for Extensions are displayed.
  • Copy the Access Token value. The Consumer Key, Consumer Secret and Access Token Secret are not needed.
  • Click Done.
  • Clicking Reauthorize later generates a new Access Token and invalidates the old one, so update the connection if you do.

​
Find your Store URL

Use your store’s base URL with no path, for example https://mystore.com. Remove any path such as /admin or /index.php. REST calls are sent to <Store URL>/rest/<Store Code>/V1.

1

Connect

  • Click Connect.
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup.
2

Use Actions

Connect an AI platform to the linked account’s actions. See AI Platforms.Other ways to call actions are listed in Protocols & SDKs.