API Keys
API keys authenticate your requests to the Ikawaari API.
Key Types
| Prefix | Environment | Purpose |
|---|---|---|
ik_test_ | Sandbox | Testing and development |
ik_live_ | Live | Production transactions |
Create an API Key
- Go to Developers → API Keys
- Click Create API key
- Name your key and select scopes
- Copy the full key — it's only shown once
warning
Store your API keys securely. Never expose them in client-side code, public repositories, or logs.
Key Scopes
Control what each API key can access:
| Scope | Description |
|---|---|
payments:read | View payments |
payments:write | Create and manage payments |
customers:read | View customers |
customers:write | Create and manage customers |
webhooks:read | View webhooks |
webhooks:write | Create and manage webhooks |
refunds:write | Issue refunds |
reports:read | View reports |
See API Key Scopes for the full list.
Roll a Key
If a key is compromised, roll it to generate a new one while revoking the old:
- Go to Developers → API Keys
- Click the ⋯ menu on the key
- Select Roll key
The old key is immediately revoked and a new one is generated.
Rate Limits
Each API key has a configurable rate limit (default: 100 requests/minute). See Rate Limits.