Authentication
How to authenticate requests to the API
API Key Authentication
All requests must include your API key in the X-Api-Key header.
curl https://api.settleflow.io/v2/transactions \
-H "X-Api-Key: your_api_key"API Key Types
| Environment | Prefix | Purpose |
|---|---|---|
| Test | sk_test_ | Testing and development |
| Live | sk_live_ | Production transactions |
Security
- API keys are hashed with argon2 and cannot be retrieved after creation
- Store keys securely and never expose them in client-side code
- Rotate keys regularly from the merchant dashboard
- Each key can be scoped to specific merchant applications