Authentication

Authenticate your account by including your secret key in API requests. You can manage your API key in the Developers page of the dashboard. Your API keys carry many privileges, so be sure to keep them secure! Do not share your secret API keys in publicly accessible areas such GitHub, client-side code, and so forth.

Authentication to the API is performed via HTTP Basic Auth. Provide your API key as the basic auth username value. You do not need to provide a password.

If you need to authenticate via bearer auth (e.g., for a cross-origin request), use -H "Authorization: Bearer sk_test_[keyvalue]" instead of -u sk_test_[keyvalue]:.

All API requests must be made over HTTPS. Calls made over plain HTTP will be auto-forwarded to HTTPS. API requests without authentication will fail.