Documentation
DocumentationAPI IntegrationAuthentication

API Authentication

Learn how to authenticate your API requests to Inkress using API keys.

Overview

The Inkress API uses API keys to authenticate requests. You can view and manage your API keys in the Integration section of your dashboard.

API Key Types

Test Keys

For development and testing

Begin with sk_test_

No real charges are made with test keys

Live Keys

For production use

Begin with sk_live_

Real charges are processed with live keys

Making Authenticated Requests

Include your API key in the Authorization header of your requests:

Authorization: Bearer sk_test_abc123xyz456def789

Example Request

Here's a complete example using cURL:

curl https://api.inkress.com/v1/payment-links \
  -H "Authorization: Bearer sk_test_abc123xyz456def789" \
  -H "Content-Type: application/json"

JavaScript Example

const response = await fetch('https://api.inkress.com/v1/payment-links', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer sk_test_abc123xyz456def789',
    'Content-Type': 'application/json'
  }
});

const data = await response.json();
console.log(data);

Python Example

import requests

headers = {
    'Authorization': 'Bearer sk_test_abc123xyz456def789',
    'Content-Type': 'application/json'
}

response = requests.get(
    'https://api.inkress.com/v1/payment-links',
    headers=headers
)

print(response.json())

Error Handling

If authentication fails, you'll receive a 401 Unauthorized response:

{
  "error": {
    "type": "authentication_error",
    "message": "Invalid API key provided"
  }
}

Best Practices

  • Never commit API keys to version control
  • Use environment variables to store API keys
  • Rotate your API keys periodically
  • Use different keys for development and production
  • Revoke keys immediately if they're compromised