Generating and managing API keys

API keys authenticate your requests to the InzoPay API. You have two environments: Live (real money) and Test (sandbox).

Key types

• Secret key (ik_live_sk_...) — used server-side only. Never expose in browser code.
• Publishable key (ik_live_pk_...) — safe to use in frontend code.
• Restricted key — limited to specific API scopes (e.g. read-only payments).

Generating keys

Go to Developers → API Keys, choose the environment (Live or Test), and click Generate API Keys. Store your secret key securely — it is only shown once.

Rotating keys

If a key is compromised, click Rotate to generate a new secret key. The old key is immediately invalidated.

IP allowlist

You can restrict API access to specific IP addresses or CIDR ranges (e.g. 192.168.1.0/24) for additional security.