Authentication

Authenticate requests, handle rate limits and errors.

Open the interactive version or read this guide as markdown.

Authenticate every request by sending your API key in the x-api-key header.

x-api-key: your_api_key_here

API keys

Generate keys in the dashboard under Developer > API Keys. Use test keys against the sandbox base URL and live keys against production. Treat keys like passwords and keep them out of public repositories.

Rate limiting

The API allows 100 requests per minute. Exceeding the limit returns a 429 Too Many Requests response.

Pagination

List endpoints accept page (default 1) and size (default 10, max 100) query parameters. Paginated responses include a meta object:

"meta": { "page": 1, "size": 10, "total": 42, "totalPages": 5 }

Error handling

The API uses standard HTTP status codes to signal success or failure.

Status Meaning
400 Invalid or malformed request
401 Invalid or missing authentication
404 Resource not found
409 Resource conflict
503 Service unavailable

Error responses share one shape:

{
  "success": false,
  "timestamp": "2026-01-23T23:33:55.685Z",
  "path": "/api/v1/payments",
  "method": "POST",
  "error": "Unauthorized",
  "message": "Unauthorized"
}