Preloader

Authentication

The QuataPay Payment API uses API key-based authentication. You will need a merchant account to obtain your credentials.

How to get your API credentials
  1. Log in to your QuataPay merchant account
  2. Navigate to Dashboard → API Settings
  3. Copy your Client ID (Primary Key)
  4. Copy your Secret Key — treat this like a password
  5. Use both in your /authentication/token request to get a Bearer token
Client ID

Also called Primary Key. Identifies your merchant account. Safe to use as a reference.

Secret Key

Used to authenticate API calls. Never share it or commit it to source control.

Keep it secret: Never expose your Secret Key in frontend code, mobile apps, or public repositories. Make all API calls from your server.
Don't have a merchant account yet? Register here →
Authentication Flow
1

POST credentials

Send client_id + secret_id to /authentication/token

2

Receive access token

API returns a Bearer token valid for 600 seconds

3

Include in requests

Authorization: Bearer {token}

4

Refresh when expired

Cache token, re-authenticate when you get a 401 response