SP-API Authorization Walkthrough
Aitium connects to your Amazon seller data through the Amazon Selling Partner API (SP-API). This guide explains the authorization process, what happens behind the scenes, and how to troubleshoot common issues.
Overview
When you authorize Aitium, you grant it permission to access your Amazon marketplace data via OAuth 2.0. Aitium uses this access to ingest sales, traffic, inventory, and order data on your behalf through Amazon’s SP-API endpoints.
Supported Marketplace Regions
| Region | Marketplaces |
|---|---|
| North America (NA) | US, Canada, Mexico, Brazil |
| Europe (EU) | UK, Germany, France, Italy, Spain, Netherlands, Sweden, Poland, Turkey, Belgium |
| Far East (FE) | Japan, Australia, Singapore, India |
Authorization Steps
- Log in to Aitium and navigate to the Account page.
- You will see marketplace region cards for NA, EU, and FE. Each card displays the current authorization status.
- Click Authorize on the region you want to connect.
- You are redirected to Amazon Seller Central, where you review the permissions Aitium is requesting.
- Click Confirm on Seller Central. Amazon redirects you back to Aitium with an authorization code.
- Aitium exchanges this code for a refresh token using the Login with Amazon (LWA) service.
- The refresh token is securely stored and used for all subsequent API calls.
What Happens After Authorization
Once you complete authorization, Aitium’s backend automatically performs the following:
- Registers SP-API notification subscriptions — Aitium subscribes to
REPORT_PROCESSING_FINISHEDandDATA_KIOSK_QUERY_PROCESSING_FINISHEDevent types via an Amazon SQS queue. - Triggers historical data backfill — The DataKiosk ingestion function submits GraphQL queries for 720 days of sales and traffic data.
- Triggers inventory ingestion — FBA and MFN inventory data is collected across all authorized marketplaces.
- Triggers buyer data backfill — 730 days of order data are ingested in 30-day chunks via the SP-API Orders API.
Notification Infrastructure
Aitium uses an Amazon SQS queue to receive asynchronous notifications from Amazon’s SP-API service. When a report or DataKiosk query finishes processing, Amazon sends a notification to this queue. An AWS Lambda function processes these notifications, downloads the completed reports, and stores them in Amazon S3.
This event-driven architecture means you never need to poll for report status — data arrives automatically as soon as Amazon finishes processing it.
Multi-Region Authorization
You can authorize multiple regions independently. Each region uses its own SP-API endpoint and refresh token. Data from all authorized regions is unified in your Aitium dashboard, giving you a single view across all marketplaces.
Organization Members
If you are part of an organization, you do not need to authorize separately. Organization members inherit the admin’s SP-API refresh token and marketplace access automatically. All data is shared through the organization’s Amazon S3 folder.
Re-Authorization
If your refresh token expires or is revoked, Aitium will prompt you to re-authorize. Navigate to the Account page and click Authorize again for the affected region. The process is identical to the initial authorization.
Troubleshooting
- Authorization fails — Ensure you are logged into the correct Amazon Seller Central account and that your seller account is active.
- No data after authorization — Verify that your Aitium subscription is active. Data ingestion is blocked for inactive subscriptions.
- Region not showing — Confirm you have an active seller account in that marketplace region on Amazon Seller Central.
- “Aitium requires authorization” message after login — Your refresh token may have expired. Re-authorize the affected region from the Account page.