API keys
Open API keys.
Live keys need two things: the business is verified, and you’ve
verified your identity. That’s your BVN and a selfie, or your NIN,
which the dialog asks for.
Create a key: click Create test key (or Create live key), give it a name that says
where it’s used, and copy it. You only see it once. The dialog closes when you click
I’ve saved it. Keep keys on your server; browser calls are refused.
Roll a key: makes a replacement and lets you choose when the old one stops: now, in 1 hour, in
24 hours or in 7 days. Use it to rotate without downtime, or straight away if a key leaks. Rolling
doesn’t need an identity check.
Revoke a key: calls with it fail at once. This can’t be undone.
You can have up to 10 active keys per mode. Viewers see the list but can’t change it.
Webhooks
Open Webhooks. Owners, admins and developers manage test endpoints; only owners and admins manage live ones. Add an endpoint: a publichttps URL, an optional description, and the events to send (or all
of them). Click Add endpoint.
Click an endpoint to:
- see its delivery stats for the last 24 hours and 7 days;
- show, copy or rotate its signing secret (the old one keeps working for 24 hours);
- send a test event;
- see each delivery and your server’s response, and resend one, or every failure since a time;
- pause, resume or delete it.