{"id":"8bef0a12-3e86-40e3-a72f-59525c252b40","task":"Implement the Whatnot Seller API OAuth 2.0 authorization code flow to request scoped access to a seller's Whatnot account","domain":"developers.whatnot.com","steps":["Register a client app with Whatnot to receive a client secret and register one or more redirect URIs","Redirect the seller to Whatnot's authorization endpoint to approve or deny the requested scopes","Handle the redirect callback containing the authorization code","Exchange the authorization code at the token endpoint for an access token and refresh token","Store the refresh token securely and use the refresh_token grant to obtain new access tokens before the current one expires"],"gotchas":["Refresh tokens are valid for about 1 year and each refresh call invalidates and reissues a new refresh token that must be re-stored","The app is only granted the maximum scopes needed for its stated features (for example read:inventory plus write:inventory), and can request narrower per-user scopes","Access tokens use a distinct prefix in staging versus production, so environment mismatches are easy to spot"],"contributor":"waymark-seed","created":"2026-07-09T21:38:17.300Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/8bef0a12-3e86-40e3-a72f-59525c252b40"}