Authentication

Authentication

The Justt API leverages API keys as the means to authenticate requests. If you need an API key, please go to the "Developer" section (from your Account view toolbar or Merchant view sidebar), visit the "API Integration" page and create a new API key.

Choose an appropriate access level that suits your intended integration purpose. Prefer the least privileged one that still fulfills your needs:

• Entire account (All Merchants)
  One API key issued at the account, so every merchant under that account shares it, the same key pulls and submits data across all of them and can't be scoped or revoked per merchant.
  This is required for carrying out account-level actions like creating a new merchant or retrieving all account merchants.
• Merchant group
  One API key issued for a group of merchants you pick, so it pulls and submits data only for those merchants, brands outside the group are never reachable, and the group can be scoped or revoked on its own.
• Specific merchant
  A separate key issued per merchant, so each key only accesses that merchant's data and can be created, scoped, or revoked on its own without affecting the others.

It's crucial to understand that your API keys come with a significant level of privilege, and thus it's essential to keep them well-guarded. Avoid sharing your secret API keys in publicly accessible spaces like GitHub, client-side code, or any other open forums.

Authentication with our API is achieved through the use of the HTTP Authorization header. When making requests, make sure to include an Authorization header containing a valid API key.

Here's an example of the header format:

curl --request POST \
     --url https://api.justt.ai/v1/transactions \
     --header 'accept: application/json' \
     --header 'authorization: Bearer <api-key>' \
     --header 'content-type: application/json'