lazada

name	lazada
version	1.0.0
description	Lazada Seller Center API — manage products, orders, and inventory across SEA.
author	ZeptoClaw
license	MIT
tags	["lazada","ecommerce","sea","seller"]
env_needed	[{"name":"LAZADA_APP_KEY","description":"App key from Lazada Open Platform (open.lazada.com)","required":true},{"name":"LAZADA_APP_SECRET","description":"App secret from Lazada Open Platform","required":true},{"name":"LAZADA_ACCESS_TOKEN","description":"OAuth access token (obtained after seller authorization)","required":true},{"name":"LAZADA_REGION","description":"Region endpoint: my (Malaysia), sg, th, ph, vn, id","required":true}]
metadata	{"zeptoclaw":{"emoji":"🛍️","requires":{"anyBins":["curl","jq","python3"]}}}

Lazada Seller Skill

Manage your Lazada store across Southeast Asia using the Lazada Open Platform API.

Setup

1. Register at open.lazada.com → Create App
2. Get your App Key and App Secret
3. Complete OAuth flow to get an Access Token for your seller account
4. Set your region: my, sg, th, ph, vn, or id

export LAZADA_APP_KEY="12345"
export LAZADA_APP_SECRET="abc123secret"
export LAZADA_ACCESS_TOKEN="50001234|xxx..."
export LAZADA_REGION="my"  # Malaysia

Signature Helper

All Lazada API calls require HMAC-SHA256 signatures. Use this helper:

lazada_call() {
  local path="$1" params="$2"
  local ts=$(date +%s%3N)
  local base="$path${params}&access_token=$LAZADA_ACCESS_TOKEN&app_key=$LAZADA_APP_KEY&sign_method=sha256&timestamp=$ts"
  # Sort params alphabetically for signing (use Python for reliability)
  local sign=$(echo -n "$base" | python3 -c "
import sys, hmac, hashlib
msg = sys.stdin.read()
print(hmac.new('$LAZADA_APP_SECRET'.encode(), msg.encode(), hashlib.sha256).hexdigest().upper())
")
  curl -s "https://api.lazada.com.$LAZADA_REGION/rest$path?&access_token=&app_key=&sign_method=sha256&timestamp=&sign="
}