Authentication
Every request is authenticated with a secret API key sent as a bearer token.
API keys
- Sandbox keys begin with sk_sandbox_
- Production keys begin with sk_live_
- Keys are issued per approved organization
Sending the key
Include the header Authorization: Bearer YOUR_KEY on every request.
Keeping keys safe
Never expose secret keys in browsers or mobile apps. Call Simsfer only from your servers.