Credentials

OxPay uses two types of credentials in order to authenticate/authorize requests. You can view and manage your API keys in the OxPay Merchant Portal.

1. API Key
2. Sign Key

API Key

This is used to authenticate/authorize the API request. Merchants should generate an API key through the merchant portal and should send it in the Authorization header in the API request.

Sign Key

This key is used to create the signature. This is shown in the merchant portal, only if the merchant enables integrity check feature. If integrity check feature enabled, the payload should be hashed using the sign key and create the signature which should be sent in the “Signature” header.