Exchange API key for JWT

Exchange your API key for a short-lived JWT access token. Send your key in the X-API-Key header; use the returned token as a Bearer token in the Authorization header on all other /customer endpoints.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Headers
string
required
Responses

401

The supplied API key was rejected: unknown, superseded by a key rotation, or inactive. The X-API-Key header is required and checked at the gateway, so an absent header returns 400, not 401.

403

Source IP not in your merchant allowlist, client certificate missing or not registered against your company, or the company is not enabled for merchant API access

429

Too many failed authentication attempts from your source IP (20 failures in a rolling 5 minute window); rate limited

500

Internal server error

Language
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json