Authentication
// secret keys, sent as a bearer token
Authenticate every request with your secret API key in the Authorization header. Keys are created and rotated from your dashboard. Live keys are prefixed sk_live_ and solve real gates against your balance. Test keys sk_test_ run against a sandbox that returns a deterministic, never-billed token stamped "mode":"sandbox" — ideal for wiring up and CI, but they never clear a real gate, so don't ship them to production.
header
Authorization: Bearer sk_live_8Kd2aF9pQ…X1c
// keep secret keys server-side — never ship them to a browser!
Treat keys like passwords. A leaked sk_live key can spend your balance — rotate it from the dashboard the moment it's exposed, and the old key dies instantly.
Ready to pour through the gate?
// free sandbox keys · no card required to start