Skip to main content

Authentication

ONVO authenticates requests with API keys sent as Bearer tokens.

Authorization: Bearer onvo_test_secret_key_...

Where to get your API keys

API keys are available from the ONVO Dashboard at onvopay.com after you register an account. When the account is created, ONVO automatically generates test API keys so you can integrate and validate your flow in test mode.

After you complete onboarding, your account can switch to live mode from the Dashboard and obtain live API keys.

Key types

KeyUse
onvo_test_secret_key_...Server-side code in test mode.
onvo_live_secret_key_...Server-side code in live mode.
onvo_test_publishable_key_...Client-side code in test mode.
onvo_live_publishable_key_...Client-side code in live mode.
warning

Never expose secret keys in browsers, public mobile apps, or repositories.

HTTPS

All requests must use HTTPS. Requests without authentication or over HTTP fail.