Skip to main content
WarningNever send your secret key to the frontend. Access Fintoc endpoints only through a backend, so that your secret key never comes in direct contact with the client.
To use the Fintoc API, you need your secret key. To instantiate the Fintoc widget, you need your public key. To retrieve either API key, head over to the dashboard. Once in the dashboard, click on the button to go to your API Keys page:
By default, you see live mode. You can also see test mode by using the mode toggle:
If you are using the test environment, use the API keys shown in test mode. Otherwise, use the API keys shown in live mode. You can see your API keys by pressing the little eye button beside them:

The eye button beside an API key reveals it

Notice that some of the API keys start with sk_ and others start with pk_. Keys that start with sk_ are secret keys. Keys that start with pk_ are public keys.
You can only access your secret API key for live mode onceYou can copy and view your secret key only when you activate or rotate it, so store it securely in your backend.
You can access both your public key and secret key for test mode at any time with the eye or copy buttons. For live mode, you can always access the public key. The dashboard displays the secret key only when you activate or rotate it, so store it securely in your backend when the key appears.
We recommend you rotate your secret key for live mode at least once per year. To rotate the key, access the API keys section and click the three-dot menu on the right side of the table. You can schedule the rotation date or rotate it immediately: