API authentication

Every request must carry your key: Authorization: Bearer YOUR_API_KEY. Keys are created in Dashboard → Reseller → API (reseller) or Dashboard → Business → API (business).

• Test key — safe sandbox, nothing is billed.
• Live key — real orders charged to your balance.

Rate limits and the exact request/response format are on Documentation-api. Never put a live key in client-side code.