Skip to main content
Available to roles: Owner You need to generate an API key and a secret key before you can start making API requests:
  • API key - Specified in the X-Processing-Key header in API requests. You can view it in the API keys section of your merchant dashboard.
  • Secret key - Used to generate an HMAC-SHA512 signature of the request body. The signature is specified in the X-Processing-Signature header in API requests. You can view the secret key only once, after activating the API key for the first time.
API keys are not tied to a specific user. They are tied to your merchant account. Only one API key and secret key pair can be active for a merchant at a time.

​
Generate an API key and activate it

1

In your merchant dashboard, go to the API keys tab.

2

Click Generate API key, enter your 2FA code, and click Generate.

The list of Generated API keys will be updated.
3

Click Activate next to the API key.

Only one API key can be active at a time. If another key is already active, disable it first, then return to this step.
4

Optionally, specify IPs addresses for your requests, enter your 2FA code, and click Activate.

Your secret key will be displayed after you click Activate. Make sure no one can see or record your screen.
Specify the public IP addresses from which you will make requests to the API. Use either IPv4 or IPv6 format, and separate multiple IP addresses with commas. If you leave this blank, requests from any IP address will be accepted.
5

Save your secret key and click Done.

Your secret key is displayed only once. Toggle Secret key QR code to display the secret key as a QR code.

Do not share your secret key with anyone.

If you think your secret key may have been compromised, deactivate it immediately and contact our Support team.

​
FAQ

​
How can I view my secret key if I lost it?

If you don’t have your secret key, you need to deactivate the corresponding API key, and then generate a new API key and secret key.

​
What should I do if someone else got access to my secret key?

If you suspect that your secret key was compromised, deactivate it immediately and contact our Support team.
Last modified on June 12, 2026