Authentication

API credentials

To authenticate with Klarna, use your API credentials and HTTP basic auth.

The credentials consist of a username and a password:

• The username consists of your Merchant ID (MID), a unique number that identifies your e-store, combined with a random string.
• The password is a string associated with your MID and is used to authorize use of Klarna APIs.

Note: The API credentials are separate from your MID. It's possible to have several API credentials associated with the same MID.

The credentials should be sent as in the Authorization header for every request with the username and the password.

You receive both your live (production) and test (playground) credentials by contacting your regional Klarna merchant support team.

If the credentials are missing or wrong, Klarna responds with 401 Unauthorized. You can read more about HTTP Basic auth in the Wikipedia article.

Security

TLS

TLS (Transport Layer Security) is a protocol that secures data sent over the internet. To ensure your connection is secure, we recommend using TLS 1.2 when connecting to Klarna APIs.

TLS 1.0 and 1.1 decommissioning schedule

We take the security and integrity of our customers seriously. Therefore, we’re starting to decommission old versions of TLS on the following API URLs:

• api.klarna.com
• api-na.klarna.com
• api-oc.klarna.com

We’ll start enforcing TLS 1.2 in our environments according to the following schedule:

• January 30, 2024 in the playground environment
• March 29, 2024 in the production environment

To prepare for this change, make sure that you’re using TLS 1.2 when communicating with Klarna.