x-api-key and x-api-user.
Headers
| Header | Description |
|---|---|
x-api-key | Your API key. Provided during onboarding for both staging and production. |
x-api-user | Your merchant username. Provided during onboarding. |
Example request
Managing API keys
You can generate, rotate, and revoke API keys programmatically:| Action | Endpoint |
|---|---|
| Generate a new key | POST /user/api-key |
| List all keys | GET /user/api-keys |
| View key scopes | GET /user/api-key/scopes |
| Invalidate a key | POST /user/api-key/invalidate |
| Delete a key | DELETE /user/api-key |
Security best practices
Never expose your API key in client-side code. All API calls should be made from your backend server. Thex-api-key grants full access to your merchant account.
Use separate keys for staging and production. Your staging credentials only work against the staging environment and vice versa.
Rotate keys periodically. Use the Generate API Key endpoint to create a new key, update your integration, then invalidate the old key.
Getting credentials
If you do not have credentials yet, request access here. The Partna team will contact you to complete onboarding and set up your merchant account. Once your account is active, generate your API keys from the dashboard:- Staging: staging-dashboard.getpartna.com
- Production: dashboard.getpartna.com