Phase 1: Backend Configuration (OAuth1 API)
This step allows Kleep to retrieve your product catalog, order history, and return data to calibrate the algorithm.1. Create OAuth1 Integration
- Log in to your Magento Admin Panel.
- Navigate to System > Integrations.
- Click on “Add New Integration”.
- Fill in the Name field (e.g., “Kleep Integration”).
- Enter your Admin Password to confirm.
2. Configure API Permissions
This should correspond to the following ACL’s in Magento:
Magento_Catalog::productsMagento_Catalog::categoriesMagento_Sales::salesMagento_Sales::creditmemoMagento_Sales::actions_viewMagento_Rma::rmaMagento_Rma::magento_rmaMagento_Rma::rma_attributesVendor_Module::returnsMagento_CatalogInventory::cataloginventoryMagento_Store::storeMagento_Config::configMagento_Inventory::inventoryMagento_Customer::customer
- If your Magento instance exposes additional API layers or custom endpoints (for example, custom returns/RMA APIs), please coordinate with us.
- If you use an external return provider with no integration through Magento API, please refer to the return data documentation or coordinate with us to pick the right integration method.
3. Activate and Retrieve Credentials
- Click “Save” to create the integration.
- Click “Activate” on the newly created integration.
- A pop-up will display your OAuth credentials:
- Consumer Key
- Consumer Secret
- Access Token
- Access Token Secret
- Copy these credentials – you will need to send them to your Kleep contact.
Subscribe Pro tutorial: Create and get Magento 2 API credentials Adobe official tutorial: Magento 2 OAuth authentication
4. Firewall Configuration
If your store is behind a firewall or uses IP-based access restrictions, please whitelist the following Kleep IP addresses to ensure uninterrupted API access:34.1.4.382.66.252.201176.148.67.162
5. Send Credentials to Kleep
Please send the following information to your Kleep contact via email:- Please provide the complete API base URL(s) for the shop(s).
- OAuth1 Credentials
- Consumer Key
- Consumer Secret
- Access Token
- Access Token Secret
6. How the Sync Works
Once the integration is active, here’s what the connector actually does with it. Every call is read-only. All requests areGET. No route in the connector issues a POST, PUT, or DELETE — nothing is written back to your Magento instance.
Catalog resources
Orders, returns, and credit memos follow the same paginated
GET pattern, typically 250 records per page.
Incremental sync. After the first full import, each resource is queried with a date filter built from the API’s native searchCriteria[filterGroups], so only records changed since the last successful sync come back:
The timestamp only advances once a sync completes successfully.
Load, illustrated. For a 10,000-SKU catalog, the first full import is roughly 14
GET requests (10 for products, 2 for stock, 1 for categories, 1 for attributes). Daily syncs after that are typically 2-4 requests, since only the delta is re-fetched.
Every request has a 20s connect / 60s read timeout and retries up to 3 times with exponential backoff (1s, 2s, 4s + jitter) on failure. Outside scheduled sync windows, the connector makes no requests to your server — no webhook, no continuous polling.
Phase 2: Frontend Integration (Widget)
This step involves adding the Kleep script to your product pages (PDP). Compatible with all versions of Magento. Follow our JS Library Widget guide to install and configure the front-end CTA on your product pages.Phase 3: Missing Data Management (SFTP)
This section applies when data cannot be retrieved through standard API endpoints. If your Magento API does not allow retrieving Returns or certain specific data, we proceed via CSV file exchange. Please refer to the documentation below. This guide will walk you through the process of transmitting missing data step by step:Phase 4: Validation & Production Deployment
1. Test Environment
Deploy first on your Preprod/Staging environment.2. Visual Validation
Before going live, verify the following:- Does the button display correctly?
- Does clicking open the pop-up (Drawer)?
- No “CORS” errors in the browser console?
