API Key Auth
What it does
Secure API authentication with publishable and secret key pairs. Publishable keys (pk_live_) are safe for client-side widget usage with limited scope. Secret keys (sk_live_) provide full API access and should only be used server-side.
How to use it
Create API key
Go to Dashboard > API Keys > Create Key. Choose between publishable (client) and secret (server) key types.
Use in requests
Include the key in the X-API-Key header or Authorization: Bearer header.
Rotate keys
Generate a new key and update your integration before revoking the old one.
Monitor usage
Each key tracks its own usage stats, last used timestamp, and rate limit consumption.
API Reference
/api/v1/sellers/keysRelated Features
155+ API endpoints with consistent JSON responses
Intelligent rate limiting with per-plan quotas and burst support
Granular API key scopes with row-level security enforcement
Test API calls in sandbox mode without affecting production data
RBAC with admin, manager, analyst, and viewer roles