Authentication
Asyncpay's endpoints are authenticated by including your secret key in the Authentication
header of every request you make. You can view and manage your API keys on the Asyncpay dashboard.
In test mode, secret keys are prefixed by async_skt_
while in live mode, they are prefixed by async_sk_
.
Your secret keys carry a lot of privileges and allow you move money via your connected payment channels so you need to keep them secure. Do not share your secret API keys, or publish them to public places like Github, client or frontend-facing code, etc
Do not commit your secret keys to git, or use them in client-facing code such as React or Vue codebases
Authorization headers should be in the format: Authentication: Bearer SECRET_KEY
.
Authentication: Bearer async_skt_18e7k6baf164c97435a6f9b928e5a77e156adda796609bebfc5bee53d4f8
Last updated