The purpose of this document is to share and maintain a set of security requirements that must be taken into account throughout the entire integration development lifecycle. The points mentioned below aim to protect your application/integration from common threats, such as credential theft, information leakage, and commercial fraud. We encourage our integrators to build solutions aligned with cybersecurity best practices, thus ensuring the integrity and protection of confidential information of Mercado Libre sellers.

The absence of these controls compromises the operational continuity of your integration, from non-compliance with Mercado Libre audits to the possible revocation of API permissions. Beyond the administrative aspect, it would leave your infrastructure and the critical information of sellers vulnerable to external threats.

In the Mercado Libre ecosystem, the trust of sellers and buyers is our hallmark of confidence, and the role of the integrator is critical to maintaining the integrity of this chain. By developing applications that interact with the marketplace APIs, the integrator not only manages operational data, but becomes a custodian of the seller's experience and the privacy of their transactions.

This guide establishes the security standards necessary for external integrations not only to function efficiently, but to act as a robust and secure extension of our infrastructure, controlling risks so that no external vulnerability impacts organizational stability or the trust of our end users.