Create and manage your API keys
Issue live and test keys, rotate them at any time, and revoke instantly from the app.
Last updated June 1, 2026
API keys authenticate every request you make. You get one live key and one test key per business.
Create your keys
- Open Settings, then Developer, then API Keys.
- Tap Create Keys.
- Copy your live key (starts with live_) and your test key (starts with test_).
Store both somewhere safe. Treat them like passwords, anyone with a live key can create real payment collections.
Live vs test keys
- live_ keys create real payment accounts and call the /api/v1/payment routes.
- test_ keys create sandbox accounts only and call the /api/v1/sandbox/payment routes.
Rotate or revoke
You can rotate a key at any time. Revocation is instant, a revoked key stops working immediately, so update your servers before you revoke.
Tip: Never commit keys to source control or paste them into client-side code. Keep them in server-side environment variables.
What's next
- See Authenticate your API requests.
- Keep them safe: see Keep your API keys safe.
Was this article helpful?