Skip to main content
Authenticated request
Fintoc uses API keys to authenticate requests. The API keys you use to make requests are called secret keys. Secret keys have broad privileges, so keep them safe. Don’t share secret keys in public repositories or client-side code. Include a secret key in the Authorization header with every API request:
Authentication
Send every API request over HTTPS. Requests over plain HTTP fail. Unauthenticated requests also fail.