Authentication
Learn how to authenticate your API requests.
Authentication
The Uverus API uses API keys to authenticate requests. You can manage your API keys from Settings → API Keys in the Uverus Dashboard.
API Key Types
There are two types of keys, generated as a pair:
- Public Keys (
pk_...) — conventionally used in client-side contexts (e.g. the hosted checkout page). - Secret Keys (
sk_...) — used for server-to-server requests from your backend. Never expose your secret key in client-side code.
Every endpoint documented in this section requires a valid key from this pair.
Environment Isolation
Uverus provides separate keys for Live and Test modes:
pk_test_.../sk_test_...— test mode. No real money moves.pk_live_.../sk_live_...— live mode. Requires KYC approval on your account.
Sending Your Key
Pass your API key in the Authorization header as a Bearer token:
Authorization: Bearer sk_test_your_secret_keyExample Request
curl -X GET "https://api.uveruspayments.com/api/v1/merchants/me/stats" \
-H "Authorization: Bearer sk_test_..."Important
Keep your secret key secure. If compromised, revoke it immediately from Settings → API Keys and generate a new one.