Skip to main content
LuminPay uses API keys to authenticate requests. You can generate and manage your keys from your dashboard.

​
Making authenticated requests

Include your API key in the Authorization header of every request, as a Bearer token:
Keep your API key secret. Never expose it in client-side code, public repositories, or anywhere a third party could access it. If a key is compromised, revoke it immediately from your dashboard and generate a new one.

​
Revoking a key

If you need to rotate or retire a key, revoke it from the API Keys section of your dashboard, or programmatically:
Revoked keys stop working immediately.