Zid Bridge Tool

Zid Bridge is a hosted tool that completes the Zid OAuth flow for you and hands you a working set of tokens. You do not need to write any code or run a server to use it.

Use it to test the OAuth flow while you build, or as the permanent token source for a private single-store app.

Try it: bridge.zid.dev · Video walkthrough: watch the tutorial

❌

Not for public apps in production. Zid Bridge is a testing and private-app tool. Any public app submitted for review with Zid Bridge URLs registered as its redirect or callback URL will be rejected. A public app must implement the OAuth flow on its own server — see Public Apps OAuth Requirements.

When to use it

Situation	Use Zid Bridge?
Exploring the Merchant APIs before writing any code	✅ Yes
Testing your OAuth setup, scopes or credentials during development	✅ Yes
Generating a token to try a request in Postman or APIDog	✅ Yes
A private app — a single-store integration with an ERP or internal system	✅ Yes
A public app listed in Zid App Market	❌ No — will be rejected at review

Private apps have no specific activation-flow requirements, so Zid Bridge is a supported way to obtain and refresh their tokens without building an OAuth callback of your own.

How it works

Sign up at bridge.zid.dev.

Register your app — enter a name, then your Client ID and Client secret from the Partner Dashboard (Apps → All Apps → edit app → General settings → API keys).

Copy the two generated URLs. Zid Bridge creates a pair unique to your app:

Redirect URL — https://bridge.zid.dev/zid/<your-app-uuid>/redirect

Callback URL — https://bridge.zid.dev/zid/<your-app-uuid>/callback

Paste them into the Partner Dashboard as your app's redirect and callback URLs.

Activate the app on a store — your own development store, or a merchant's store for a private app.

Download the tokens from the page that appears.

What you get

After a successful authorization, Zid Bridge shows the tokens once and offers them in three formats:

Postman environment — import and start calling the API immediately

APIDog environment — same, for APIDog

Raw JSON — the full token response

Each export is pre-filled with the Authorization token, the Access-Token (X-Manager-Token) and the store ID, and is named after the store it belongs to.

A complete Zid API Postman collection is also available from the Zid Bridge home page, so you can pair the environment with ready-made requests.

💡

The token page is shown only once. Download what you need before closing it — Zid Bridge does not keep a copy. If you lose the tokens, activate the app again to generate a new set.

What Zid Bridge stores

Stored	Not stored
Your account (name, email)	❌ Access tokens
Your app's name, Client ID and Client secret	❌ Manager tokens (X-Manager-Token)
A history of which stores activated your app — store ID, name, URL and timestamp	❌ Refresh tokens

Zid Bridge needs your Client secret because it performs the token exchange on your behalf. Prefer the credentials of a development or private app, and rotate your secret in the Partner Dashboard if you stop using the tool.

Token lifetime

The tokens Zid Bridge returns are ordinary Zid OAuth tokens with the normal lifetimes — the refresh token is valid for one year. If you are using Zid Bridge for a private app in day-to-day use, you still need to refresh on a schedule, or re-run the activation before the year is out.

See Authorization for the refresh flow, and OAuth Errors & Troubleshooting if a token stops working.

Running your own instance

Zid Bridge is open source and can be self-hosted with Docker if you would rather keep credentials inside your own infrastructure. See the project's README.md for setup.

Authorization — the OAuth 2.0 flow in full

Public Apps OAuth Requirements — what public apps must implement instead

OAuth Errors & Troubleshooting — error codes and fixes

When to use it#

How it works#

What you get#

What Zid Bridge stores#

Token lifetime#

Running your own instance#