Authentication

All API requests require an API key in the X-Api-Key header.

API Key Format

sk_live_xxx.yyy.....

• environment: test or live
• API keys are provided by AlyaPay during onboarding
• Each key is linked to a specific merchant store

Usage

Include the API key in every request:

curl -X POST "https://api.alyapay.com/api/v1/public/partner/transactions" \
  -H "X-Api-Key: sk_live_xxx.yyy" \
  -H "Content-Type: application/json"

Security

• Never expose API keys in frontend code
• Store keys in environment variables
• Use test keys for development
• Use live keys for production