API keys

How authentication will work when the API is available.

Not available yet. This is on the roadmap. If you would like early access, create an account and we will let you know the moment it is ready.

How keys will work

Keys are issued per account and can be revoked at any time
Live and sandbox keys are separate, so test traffic never reaches real signers
The full key is shown once at creation and stored hashed after that
Every request made with a key is logged, so you can see what was called and when

Keeping keys safe

Keys carry the same authority as your account. Keep them on your server, never in client-side code or a public repository. If a key is exposed, revoke it and issue a new one — revocation takes effect immediately.

Back to API documentation →