Skip to main content
Every Pagou API request requires authentication.

Supported methods

  1. Authorization: Bearer <token>
  2. apiKey: <token> header
  3. Basic Auth with username token and password x
Use one method across all services. Bearer token is the recommended default for new integrations.

Example response

Compatibility examples

Common error

Status 401
Fix: confirm the token belongs to the selected environment and that you are not mixing auth schemes across services.

Operational rules

  • Rotate credentials in your secret manager, not in source code.
  • Never log tokens.
  • Keep browser code on public keys only. Secret API tokens stay on the backend.

Next steps