appId not required for merchant APIs