To interact with GreenBanana’s BNPLx APIs, every request must be securely authenticated using an API key. This key is unique to your project and acts as your application’s identity when making requests. Your API key is generated via the GreenBanana Developer Dashboard. GreenBanana Group authenticates your API requests using your account’s API keys. Each account has two API keys for authentication:
| Key | When to Use |
|---|---|
| Secret Key (api-key) | Used to authenticate API requests from your merchant server. Don’t expose this key on a website or embed it in a mobile application. |
| Publishable Key | Used to authenticate API requests from your app’s client. Can be publicly-accessible in your web or mobile app’s client-side code. |
How to Generate Your API Key
Log in to your Dashboard- Go to the “Developers” tab
- Click on “API Keys”
- Click “Create New API Key”
- Copy the generated Secret API Key and store it securely (e.g., in environment variables or a secrets manager)
Configuring Authorization in API Tools (Postman)
To use your API key in tools like Postman:
🎉 You are ready to make your first payment!
Managing API Keys
- You can revoke or regenerate keys anytime from your our Dashboard
- Use environment-specific keys to isolate testing and production
- Consider rotating keys periodically for added security