Skip to main content
Open the profile menu in Business view and select Developers. The page has separate API Keys and Webhooks tabs.

​
API key types

Create only the key type required by the integration. Copy a new secret immediately and store it in a server-side secrets manager; the complete value may not be shown again.
Never put either key in browser JavaScript, a mobile binary, source control, screenshots, support tickets, or telemetry.

​
Webhook endpoints

The Webhooks tab lets you create, update, enable, disable, and remove organization-scoped HTTPS endpoints. Anyway signs deliveries with its platform Ed25519 key; verification uses the published public key rather than a per-endpoint shared secret.

Merchant API

Review the stable server API and its generated contract.

Webhook API

Verify signatures and implement idempotent fulfillment.