Create a Payment API key
curl -X PUT "https://test-api.kashier.io/v2/merchants/api-keys?operation=apiKey.create" \ -H "Content-Type: application/json" \ -d '{ "keyName": "Storefront checkout" }'{ "body": { "merchantId": "string", "mode": "test", "isInternal": true }, "message": "string"}Issues a new Payment API key. Despite being a create, the verb is PUT and the
operation is selected by a required operation=apiKey.create query parameter —
omit it and the call is rejected.
The key is created in the environment you called, taken from the host, not from anything you send. Requires the API-key permission on your user's role.
Rotating a key is create-then-delete: issue the new key, move your integrations onto it, then delete the old one. There is no in-place rotation, so nothing breaks while both keys are live.
Authorization
secretKey Merchant secret key used to identify the merchant, obtained from Kashier's dashboard. Pass the raw secret key value in the Authorization header (NOT a "Bearer" token).
In: header
Query Parameters
Must be apiKey.create.
Value in
- "apiKey.create"
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
application/json
application/json
List your Payment API keys GET
Returns the Payment API keys on your merchant account — the keys used to compute the Kashier-Hash order hash and to verify redirect and webhook signatures. Payment API keys are not bearer credentia…
Delete a Payment API key DELETE
Permanently removes a Payment API key. Anything still computing hashes with it starts failing signature verification immediately, so retire it from your integrations first. Requires the delete-API-…