← Back to EcomCentral
ALIEXPRESS OPEN PLATFORM (AEOP)

AliExpress Setup Guide

Connect your AliExpress seller account to EcomCentral using the AliExpress Open Platform (AEOP) DS API with HMAC-SHA256 signed requests.

Prerequisites

ℹ️ All requests are POSTed to a single AEOP gateway (https://api-sg.aliexpress.com/sync) and signed with HMAC-SHA256. EcomCentral handles signing automatically — you only supply the three credentials below.

Getting Your API Credentials

  1. Go to AliExpress Open Platform (open.aliexpress.com) and sign in with your seller account
  2. Create or open your app and note the App Key and App Secret
  3. Complete the OAuth 2.0 authorization flow to get an access_token for your seller account — the platform provides a code you exchange via the token endpoint
  4. In EcomCentral, add a new AliExpress connection and enter the three required fields
  5. Click ⚡ Test to verify the signing and fetch your seller profile
⚠️ Access tokens expire (typically after 30 days). When yours expires, re-authorize via the OAuth flow and update the access_token via Rotate Keys on the connection detail page.

Credentials Reference

KeyRequiredDescriptionExample
app_key Required App Key from the AliExpress Open Platform 123456
app_secret Required App Secret — used to HMAC-sign every request s3cr3t…
access_token Required OAuth 2.0 token authorizing your seller account 50000001…
api_base Optional Gateway URL — defaults to the Singapore endpoint https://api-sg.aliexpress.com/sync
✅ Alternative key names accepted: appKey for App Key; appSecret for App Secret; accessToken for access token; apiBase for the gateway URL.

Order Statuses

AEOP uses these canonical order_status values:

WAIT_BUYER_PAY WAIT_SELLER_SEND_GOODS SELLER_PART_SEND_GOODS WAIT_BUYER_CONFIRM_GOODS BUYER_AUTO_CONFIRM_GOODS FINISH IN_CANCEL RISK_CONTROL

AEOP Methods Used

ℹ️ All methods are POSTed to the single gateway. The method field selects the operation.
OperationAEOP Method
Test connectionaliexpress.solution.seller.query
List ordersaliexpress.ds.order.search
Order detailaliexpress.ds.order.get
Submit trackingaliexpress.ds.member.order.logistics.shipping
List productsaliexpress.ds.product.search
Product detailaliexpress.ds.product.get

Submitting Tracking Numbers

AliExpress requires both a tracking number (logistics_no) and a carrier code (sp_code) to submit shipment info. Both fields are mandatory in the EcomCentral tracking form.

FieldNotes
numberThe carrier's tracking number
carrierAliExpress carrier code (e.g. YANWEN, CAINIAO, POST_NL)
service_nameOptional service name string

Supported Features

FeatureSupportedNotes
View orders (paginated)✅Order ID, date, status, total
View order detail✅Buyer info, address, line items, logistics tracking
Submit tracking number✅Requires tracking number + carrier code
View products (paginated)✅Product ID, name, price, stock
View product detail✅Images, SKU variants, attributes, per-SKU price/stock
Update stock quantity❌Not available — no stock-write endpoint in AEOP DS API
Test connection✅Seller query — returns login ID, seller ID, company name

Troubleshooting

✕ Signature error / invalid sign

AEOP returns an error_response block when the HMAC signature is invalid. The signature covers all sorted non-empty params, sandwiched by the app_secret. Verify your app_key + app_secret pair is correct and that your server clock is accurate (requests include a timestamp).

✕ Access token expired or invalid session

AliExpress access tokens expire after ~30 days. Re-run the OAuth authorization flow and use Rotate Keys on the connection detail page to update access_token.

✕ Order detail fields show "—"

The AEOP DS API uses deeply nested response structures (aeop_order_list.order_info[], child_order_list, etc.). EcomCentral renders these defensively. If a field is blank, the API may use a different key in your region or account type — check the raw AEOP response via the test console.

✕ Tracking submission fails

AliExpress requires a valid carrier code (sp_code). Use the exact code from AliExpress's logistics provider list (e.g. YANWEN, CAINIAO_CONSOLIDATED). A free-text carrier name will be rejected.