Authentication

ONVO authenticates requests with API keys sent as Bearer tokens.

Authorization: Bearer onvo_test_secret_key_...

Related API reference

• API introduction
• Create a payment intent
• Create a payment method

Key types

Key	Use
onvo_test_secret_key_...	Server-side code in test mode.
onvo_live_secret_key_...	Server-side code in live mode.
onvo_test_publishable_key_...	Client-side code in test mode.
onvo_live_publishable_key_...	Client-side code in live mode.

warning

Never expose secret keys in browsers, public mobile apps, or repositories.

HTTPS

All requests must use HTTPS. Requests without authentication or over HTTP fail.