Every marketplace, on your own OAuth.
OttoCentral connects to Amazon exclusively through the official Selling Partner API. Each Amazon account you connect grants OttoCentral its own refresh token, scoped to the marketplaces you pick, revocable by you at any time.
Per-seller LWA OAuth.
You click Connect from OttoCentral, land on Amazon's Login with Amazon consent screen for that seller account, and Amazon issues a refresh token to us. No shared credentials, no service accounts, no browser extension impersonating your login. Amazon knows exactly who authorised what.
The scopes we ask for.
Inventory, orders, catalog, reports, and pricing. The same set the SP-API documents for a seller-tools application, no more. We do not request buyer-only scopes, and we do not attempt to elevate scopes after the initial grant.
What we deliberately do not do.
No screen scraping of Seller Central, no shared master account, no Amazon credentials touching our servers, no browser extension riding your session. If Amazon can see the data flow, it is because you asked us to look, and Amazon can see who made the call.
Buyer PII, per Amazon's own rules.
Amazon Buyer Data received through SP-API is handled per Amazon's Data Protection Policy: displayed only to the seller who owns the account, transferred only to a warehouse integration you connect, deleted within 30 days of order date or connection revocation. Details in the Privacy Policy, section 4.
You can walk away in one click.
Revoke the authorisation from Amazon Seller Central's Manage Your Apps panel and OttoCentral loses access immediately. Your data is deleted from active systems within 30 days and from backups within 90.
Connect an Amazon account, see for yourself.
One email, we set the SP-API app up and walk you through the first sync.
Get early access