Skip to main content
Locate and copy your secret key and public key from the Fintoc dashboard for test and live modes.
Never send your secret key to the frontend. Make requests that use your secret key only from your backend so the key never reaches the client.
To use the Fintoc API, you need your secret key. To instantiate the Fintoc widget, you need your public key. To manage your API keys, open the dashboard. In the dashboard, open the API keys page:
By default, you see live mode. To switch, use the mode toggle to select test mode:
If you are using the test environment, use the API keys shown in test mode. Otherwise, use the API keys shown in live mode. When an API key is available, select the eye button beside it to reveal the key:

The eye button beside an API key reveals it

Secret keys start with sk_. Public keys start with pk_.
The dashboard shows your live secret key only during activation or rotationYou can copy and view your secret key only when you activate or rotate it, so store it securely in your backend.
You can access both your public key and secret key for test mode at any time with the eye or copy buttons. For live mode, you can always access the public key. The dashboard displays the secret key only when you activate or rotate it, so store it securely in your backend when the key appears.
We recommend that you rotate your secret key for live mode at least once per year. Open the API keys page, then select the three-dot menu on the right side of the table. You can schedule the rotation or rotate the key immediately: