Authentication
Merchant API requests use an API key. Send it from your server in the x-api-key header.
curl "https://api.example.com/api/merchant/payment-intents" -H "x-api-key: YOUR_MERCHANT_API_KEY"
You can also use Authorization: Bearer YOUR_MERCHANT_API_KEY. Do not place the key in client-side code, source control, logs, or screenshots.
Dashboard session
Setup endpoints use your Merchant Dashboard session rather than an API key. They are intended for dashboard use, not a third-party integration.