Display API Sandbox Quick Start
This guide helps developers make their first successful API call.
Overview
This guide helps you validate your Walmart Connect Display API integration by making a successful API request in Sandbox including:
- Authentication
- Header formatting
- Signature generation
- Advertiser permissions
- Asynchronous workflow handling
Once this validation is complete, you can confidently move on to campaign, creative, audience, and reporting workflows.
What this validates
Authentication
Confirms credentials, request signing, timestamps, and required headers are configured correctly.
Permissions
Confirms your advertiser account and API access permissions are configured correctly.
Async Workflows
Confirms your integration can submit jobs, poll status endpoints, and handle asynchronous responses.
Sandbox validation workflow
1. Confirm credentials
Verify Consumer ID, Auth Token, private key, and advertiser ID.
2. Generate signature
Create the authentication signature and timestamp.
3. Submit snapshot request
Send an authenticated reporting request.
4. Receive snapshot ID
Confirm the request was accepted successfully.
5. Poll status
Monitor the asynchronous job until processing completes.
6. Validate success
Confirm authentication, permissions, and async workflows are functioning correctly.
Step 1: Confirm prerequisites
Before continuing, verify you have:
- Consumer ID
- Auth Token
- Private key (
.pem) - Sandbox
advertiserId
If any of these are missing, review:
before proceeding.
Step 2: Generate authentication values
Generate the following values:
WM_SEC.AUTH_SIGNATUREWM_CONSUMER.INTIMESTAMP
Important requirements:
- Timestamp must be Unix epoch in milliseconds
- Signature validity window is short (typically 300 seconds)
- Server clocks should be NTP synchronized
See Authentication & Headers for complete examples.
Step 3: Submit a snapshot request
Why this endpoint?This endpoint is recommended because it validates:
- Authentication
- Reporting permissions
- Request signing
- Asynchronous job creation
- Polling behavior
Using a single request, partners can validate several core integration components.
Endpoint
POST /api/v1/snapshot/report
POST /api/v1/snapshot/reportRequirements
- Valid authentication
- Valid
advertiserId - Valid
reportType
Sample request
Snapshot reporting request
curl -X POST \
'https://developer.api.us.stg.walmart.com/api-proxy/service/display/api/v1/api/v1/snapshot/report' \
--header 'Authorization: Bearer <auth_token>' \
--header 'WM_SEC.AUTH_SIGNATURE: ***********' \
--header 'WM_SEC.KEY_VERSION: 1' \
--header 'WM_CONSUMER.ID: adfwe-v23-faasd2r-afs-asdfqeff' \
--header 'WM_CONSUMER.INTIMESTAMP: 1565309779' \
--header 'accept: application/json' \
--data '{ "advertiserId": 600001, "startDate": "2024-07-19", "endDate": "2024-07-24", "reportType": "bid"
}'Step 4: Validate the response
A successful response should return:
snapshotIdjobStatus
Expected response
[ { "code": "success", "snapshotId": "17", "details": "", "jobStatus": "pending" }
]Receiving a valid snapshotId confirms:
- Authentication succeeded
- Headers were formatted correctly
- Permissions are valid
- The request was accepted for processing
Step 5: Validate polling behavior
Use the status endpoint to monitor report generation.
GET /api/v1/snapshot/report
GET /api/v1/snapshot/reportContinue polling until the report reaches a terminal state.
This validates:
- Async job handling
- Polling logic
- Reporting permissions
Recommended polling interval
Use a polling interval of 30-60 seconds. Polling more aggressively may result in unnecessary API traffic.
Step 6: Validate permissions
A successful reporting request confirms reporting access only.
If reporting succeeds but campaign creation fails:
- Confirm the advertiser granted Campaign Management access
- Confirm the advertiser account supports the requested workflow
- Review Account Access & Permissions
Common scenarioReporting-only access successfully authenticates and retrieves reporting data but cannot create or update campaigns, ad groups, audiences, or creatives.
Confirm success
You have successfully completed Sandbox validation when:
- A valid JSON response is returned
- A
snapshotIdis generated - Polling requests succeed
- No authentication errors occur
- No authorization errors occur
At this point:
✅ Authentication is working
✅ Headers are configured correctly
✅ Reporting permissions are validated
✅ Async workflows are functioning
You are ready to begin implementing Display API workflows.
Common sandbox issues
| Issue | Likely Cause |
|---|---|
401 Unauthorized | Indicates that authentication credentials are missing or invalid, requiring the client to provide valid credentials. |
403 Forbidden | Occurs when the client has valid credentials but lacks the necessary permissions to access the resource |
400 Invalid payload | Missing required parameter |
5xx | Server side issues |
| Empty response | No data available for the advertiser |
| Snapshot remains pending | Polling too frequently or processing delay |
| Reporting succeeds but campaign APIs fail | Reporting-only access granted |
What happens next
After completing Sandbox validation:
- Review Campaign Management Overview
- Review Creative Management Overview
- Review Audience Overview
- Review Reporting Overview
- Begin implementing your first production workflow
Related pages
Updated about 4 hours ago
