Skip to main content

Overview

Use merchant API keys (x-api-key) for server-to-server integrations.

Authentication

Requires a dashboard bearer token (Authorization: Bearer <jwt>).

Request

List keys

Create a key

Revoke a key

Response

Example list response (keys are masked):

Errors

  • 401 missing/invalid dashboard bearer token
  • 404 key not found (revoke)
  • 403 policy limits (for example: maximum number of active keys)

Examples

  • Rotate keys by creating a new key, deploying it, then revoking the old key.
Next: Invoices