Skip to main content
Every request requires two headers. Generate an API token from your Atlas merchant portal and pass it as the X-Api-Key value:

Example

Token security

  • The portal shows the token plaintext only once at creation — copy it somewhere safe before closing the dialog
  • Don’t share API tokens in public code, screenshots, or client-side code
  • Store tokens in environment variables or a secret manager
  • If a token is compromised, revoke it from the portal and generate a new one

Error response

Invalid or missing API token returns 401 Unauthorized: