Quickstart & authentication

Set up your account, protect your API key and make your first integration.

Before you start

For the partner REST API and widget, complete these account steps. To place a guest order through an AI assistant without a partner account, use the public MCP server.

Sign in with Google and complete the partner application, including the HTTPS website where your integration runs. Completed new applications activate automatically; access can later be revoked.
In the dashboard, accept the current Partner terms. Acceptance is once per version.
Choose your integration: for the standalone widget, copy your personalized snippet and connect finished card images. For a server API integration, create a test/live key under 1. Server-side API keys. Keep that secret on your server; the standalone widget does not need it.
For lifecycle notifications, configure 2. Order webhooks and copy its separate signing secret. See webhook setup.

No Stripe Connect account is required for ordinary or prepaid checkout. Optional Connect payouts require onboarding. A test key runs artwork validation and a complete simulated checkout, including order confirmation and signed test events. The optional prepaid sandbox supports simulated Stripe payments with test credit; test orders never print or ship. A live key enables payment checkout when that deployment is configured for it.

Authenticate from your server

Send your partner key as a bearer token. Bind every cart and upload reference to the owning customer session. Never place the secret in browser code or a public environment variable.

Server environment

TCGP_API_BASE=https://partner.tcgplaytest.com
TCGP_API_KEY=your_partner_api_key
STORE_ORIGIN=https://your-store.example

STORE_ORIGIN must match your registered HTTPS website. Your existing live partner key also works for prepaid testing when the platform uses Stripe test credentials.

TCGPlaytest · Cardify LLC Partner terms Support