Authentication

The Uverus API uses API Keys to authenticate requests. You can manage your API keys from the Uverus Dashboard.

API Key Types

There are two types of keys:

1. Public Keys (pk_...): Used in client-side integrations (e.g., frontend checkout).
2. Secret Keys (sk_...): Used in server-side requests. Never expose your secret keys in client-side code.

Environment Isolation

Uverus provides separate keys for Live and Test modes:

• pk_test_... / sk_test_...: Used for testing. No real money is moved.
• pk_live_... / sk_live_...: Used for production transactions. Requires KYC approval.

Usage

Include your secret key in the Authorization header as a Bearer token:

Authorization: Bearer sk_test_your_secret_key

Example Request

curl -X GET "http://localhost:3001/api/v1/merchants/me/stats" \
     -H "Authorization: Bearer sk_test_..."

[!IMPORTANT] Keep your secret keys secure. If compromised, revoke them immediately from the dashboard settings.