A computer-implemented method for verifying identities of services making service requests, comprising: receiving, by one or more computing devices and from a merchant service system, application program code; incorporating identifying information into the application program code after it is received by the one or more computing devices, wherein the identifying information enables the one or more computing devices to verify a service request made by a computing device operated by a user; distributing, by the one or more computing devices, the application program code for operation on the computing device operated by the user, wherein the application program code comprises computer-readable instructions executable by the computing device operated by the user to perform a service; receiving, by the one or more computing devices and from the computing device operated by the user, an access request, wherein the access request comprises a request for an access token and identifying information, and wherein the computing device operated by the user extracts the identifying information from the application program code resident on the computing device operated by the user; producing, by the one or more computing devices, an access token, wherein the access token comprises the identifying information received from the computing device operated by the user; transmitting, by the one or more computing devices, the access token to the computing device operated by the user; receiving, by the one or more computing devices and from the computing device operated by the user, a service request, wherein the service request comprises a request by the service to perform an action via the one or more computing devices and the access token; determining, by the one or more computing devices, whether to allow or deny the service request by comparing the identifying information from the access token received from the computing device operated by the user to the identifying information incorporated into the application program code received from the merchant service system. receiving, by one or more computing devices and from a merchant service system, application program code; incorporating identifying information into the application program code after it is received by the one or more computing devices, wherein the identifying information enables the one or more computing devices to verify a service request made by a computing device operated by a user; distributing, by the one or more computing devices, the application program code for operation on the computing device operated by the user, wherein the application program code comprises computer-readable instructions executable by the computing device operated by the user to perform a service; receiving, by the one or more computing devices and from the computing device operated by the user, an access request, wherein the access request comprises a request for an access token and identifying information, and wherein the computing device operated by the user extracts the identifying information from the application program code resident on the computing device operated by the user; producing, by the one or more computing devices, an access token, wherein the access token comprises the identifying information received from the computing device operated by the user; transmitting, by the one or more computing devices, the access token to the computing device operated by the user; receiving, by the one or more computing devices and from the computing device operated by the user, a service request, wherein the service request comprises a request by the service to perform an action via the one or more computing devices and the access token; determining, by the one or more computing devices, whether to allow or deny the service request by comparing the identifying information from the access token received from the computing device operated by the user to the identifying information incorporated into the application program code received from the merchant service system.