Skip to main content
All requests require an API key passed in the Authorization header using the bearer authentication scheme. You can get your key from the Paycashless dashboard here:

Request Signing

Check the Signing API requests page for a detailed guide on how sign your API requests.
To protect the integrity of your API requests, Paycashless uses signature authentication. This ensures that each request is securely verified and that the data hasn’t been altered in transit. By generating a signature with your API secret using HMAC-SHA512, we’re able to validate both the authenticity and integrity of every request sent to our servers. Each request’s header therefore must include:
  1. Request-Timestamp: Unix timestamp in seconds
  2. Request-Signature: HMAC-SHA512 signature
A Request-Signature is generated using:
  1. The request path
  2. A hash of the sorted request body (for POST requests)
  3. UNIX timestamp in seconds

Example