KashierDevelopersKashier Developers
API reference and playgroundCredentials and access

Create a Payment API key

curl -X PUT "https://test-api.kashier.io/v2/merchants/api-keys?operation=apiKey.create" \  -H "Content-Type: application/json" \  -d '{    "keyName": "Storefront checkout"  }'
{  "body": {    "merchantId": "string",    "mode": "test",    "isInternal": true  },  "message": "string"}

Issues a new Payment API key. Despite being a create, the verb is PUT and the operation is selected by a required operation=apiKey.create query parameter — omit it and the call is rejected.

The key is created in the environment you called, taken from the host, not from anything you send. Requires the API-key permission on your user's role.

Rotating a key is create-then-delete: issue the new key, move your integrations onto it, then delete the old one. There is no in-place rotation, so nothing breaks while both keys are live.

Authorization

secretKey
Authorization<token>

Merchant secret key used to identify the merchant, obtained from Kashier's dashboard. Pass the raw secret key value in the Authorization header (NOT a "Bearer" token).

In: header

Query Parameters

operation*"apiKey.create"

Must be apiKey.create.

Value in

  • "apiKey.create"

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

PUT
/v2/merchants/api-keys