Authentication

Overview

VeriPay API uses API keys to authenticate requests. Your API keys carry significant privileges, so be sure to keep them secure and never share them publicly.

API Keys

VeriPay provides two types of API keys for different environments:

Environment Separation

Always use the appropriate API keys for your environment:

Rate Limiting

The VeriPay API implements rate limiting to ensure fair usage and maintain service quality:

• Default limit: 60 requests per minute per API key
• Burst allowance: Up to 10 requests in a 10-second window
• Rate limit headers: Included in all API responses

Learn more about handling rate limits in our Rate Limits guide.

Common Authentication Errors

Security Best Practices

Testing Authentication

You can test your authentication setup with a simple API call:

# Test authentication
curl -H "Authorization: Bearer sk_test_your_api_key_here" \
     https://api.veripay.us/v1/payment-requests

<?php
$api_key = "sk_test_your_api_key_here";

$curl = curl_init();
curl_setopt_array($curl, [
    CURLOPT_URL => "https://api.veripay.us/v1/payment-requests",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer " . $api_key
    ]
]);

$response = curl_exec($curl);
$httpCode = curl_getinfo($curl, CURLINFO_HTTP_CODE);
curl_close($curl);

if ($httpCode === 200) {
    echo "Authentication successful";
} else {
    echo "Authentication failed: " . $response;
}