Get started

Authentication

Every API request uses a secret key as a Bearer token. Live secrets always run in live mode. Test secrets always run in test mode.

Header

Authorization: Bearer sk_live_...
Content-Type: application/json

Where keys live

Create and regenerate keys in the dashboard under Developers. Regenerating a key invalidates the previous one immediately.

What an API key can do

Create and list virtual accounts
List transactions and customers
Request payouts to the settlement account already saved
Simulate test deposits

What requires a signed-in person

View or regenerate API keys
Change webhook URL or subscribed events
Change settlement bank, password, or two-factor authentication

Approved KYB is required before API routes will answer. The dashboard Settings page stays reachable before approval; API money-moving routes do not.

The key prefix is not what decides mode. An older live key can still begin with sk_test_. Trust which pair you copied from the Live vs Test section.