API keys
API keys let your own code talk to Paysio, so you can build custom integrations on top of your workspace. You manage them in Settings > API Keys. This guide covers creating and managing keys. What you can actually do with the API is documented separately in the developer docs.
Managing keys is restricted: owners and developers can create and revoke keys, while other members get a read-only view. See Team members for roles.
Creating a key
Click to create a key and choose:
- Type: a secret key or a publishable key. Secret keys act on your account and must be kept private (server-side only). Publishable keys are safe to use in client-side code.
- Mode: live or sandbox (test). See below.
- Name: a label so you can tell your keys apart. Paysio suggests one based on the type and mode, like "Sandbox secret key", and you can change it.
When you create the key, Paysio shows you the full key value once. Copy it right then and store it somewhere safe, because you cannot see it again afterward. From then on the list only shows a short prefix to identify each key, never the full secret.
Live vs sandbox keys
Every key is tied to the mode it was created in:
- Sandbox (test) keys work against your test data, so you can build and try things safely with no real money.
- Live keys act on your real account and real money.
Use test keys while developing, and switch to live keys only when you go to production. A test key will not touch live data, and a live key will not touch sandbox, so they cannot be mixed up. See Sandbox mode.
Revoking keys
If a key is no longer needed, or you think it may have leaked, revoke it. Revoking takes effect immediately and permanently: any code using that key stops working, which protects your account.
To rotate a key safely, create a new one first, update your code to use it, then revoke the old key. That way there is no gap where your integration is broken.
Next steps
This page is only about managing the keys. For what the API can do, the endpoints, request formats, and examples, see the full developer documentation at /docs. To receive events from Paysio in your own systems, see Webhooks.