Authentication
Stay organized with collections
Save and categorize content based on your preferences.
While no authentication is required, Google supports the following options for
use when calling the business's Native Checkout API and Cart API endpoints.
API keys
HTTP Header: X-API-Key
A shared secret value which will be used in Google's UCP API client request
HTTP header to authenticate with the checkout endpoint.
OAuth 2.0 (recommended)
HTTP Header: Authorization: Bearer <Access Token>
Following RFC 6749,
Google's UCP Platform agent uses the following properties to request the
access tokens needed for checkout endpoint interaction.
| Property |
Description |
| Client ID |
A unique string representing the client (for example, Google's UCP API |
| client) |
|
| Client Secret |
A password type string used to authenticate with the authorization server |
| Authorization endpoint URL |
The URL to the OAuth2 API endpoint |
| Format |
Basic authentication HTTP header or HTTP body |
| Encoding |
Form data or JSON |
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-09-10 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2026-09-10 UTC."],[],[]]
