Sign inGet started
Docs
Get started

Loopy Loyalty API Authentication

How to authenticate Loopy Loyalty API requests: one Bearer API key plus a connectionId. MindCloud handles Loopy Loyalty's custom auth scheme for you.

Every Loopy Loyalty API request through MindCloud needs two things: a MindCloud API Key and a connectionId for your Loopy Loyalty account. This page covers both, plus exactly how to send them, so you do not need to visit any other page to get authenticated.

Steps to authenticate

  1. Create a MindCloud account at app.mindcloud.co if you do not already have one.
  2. Generate a MindCloud API Key in API Keys. This is the Bearer token you send on every request. Keep it on your server.
  3. Create a Loopy Loyalty connection in Connections. Loopy Loyalty uses its own authentication scheme. You provide whatever it requires when you create the connection — MindCloud handles the provider-specific details for you.
  4. Copy the connection’s connectionId — you will send it on every request alongside your MindCloud API Key.

How requests are authenticated

Authentication has two layers. Your MindCloud API Key authenticates the request to MindCloud, sent as a Bearer token in the Authorization header. The connectionId selects the connected Loopy Loyalty account that should run the action. MindCloud stores and refreshes the Loopy Loyalty credentials behind that connection, so you never send provider tokens with your requests.

Pass connectionId in the query string for GET and DELETE actions, and in the JSON body for POST, PUT, and PATCH actions.

For example, calling List Stamp Images with an Loopy Loyalty connection looks like this:

curl --request POST \
  --url "https://connect.mindcloud.co/v2/universal/apps/loopyLoyalty/actions/list-stamp-images/run" \
  --header "Authorization: Bearer $MINDCLOUD_API_KEY" \
  --header "Content-Type: application/json" \
  --data '{
  "connectionId": "$CONNECTION_ID",
  "arguments": {}
}'

The Authorization: Bearer <your MindCloud API Key> header authenticates you to MindCloud; the connectionId tells MindCloud which Loopy Loyalty account to run the action against. Missing or invalid Authorization returns 401, and a missing or mismatched connectionId returns 400.

Connect Loopy Loyalty

You need a Loopy Loyalty account or subuser with access to the API credentials shown in Settings.

  1. Sign in to Loopy Loyalty

    Log in to the Loopy Loyalty app with the account that owns the API credentials you want to use for this connection.

    Loopy Loyalty app
  2. Open Settings and copy your API credentials

    In Settings, copy the API Key and API Secret shown in the credentials area. These values are used to build the signed JWT for API requests.

    Settings
  3. Enter your Loopy Loyalty username

    Use the username of the Loopy Loyalty account or subuser that owns the credentials. The API spec requires this value in the JWT username claim.

  4. Save the connection values

    Paste the API Key, API Secret, and Username into the connection form and save the connection. A later stage will wire these saved values into the JWT request flow.

Keep your key safe

Keep your MindCloud API Key on your server; do not ship it in browser code, mobile apps, public repositories, or logs. Anyone with the key can call the Universal API as your MindCloud account, across every connection you have created.