REST Authentication
Bearer token
Include your secret key in every request:Test vs Live keys
| Prefix | Environment |
|---|---|
sk_test_ | Sandbox (no real money) |
sk_live_ | Production (real payments) |
Example: verifying your key
Common authentication errors
| Code | HTTP | Description |
|---|---|---|
invalid_api_key | 401 | The key doesn’t exist or is malformed |
expired_api_key | 401 | The key has been revoked |
insufficient_permissions | 403 | The key doesn’t have the required permissions |

