API Keys

API keys authenticate your server-to-server requests to the DPT Merchant API. Each key is scoped to a single business.

Managing Keys

Create a key

1. Go to Dashboard → API Keys
2. Click New Key and give it a name (e.g. Production, Staging)
3. The full key is shown in the confirmation banner — copy it or use the eye icon to reveal it

The key is also accessible at any time via the View button in the key list.

View an existing key

Click View on any key in the list to open a detail panel showing the full key value with an eye/copy toggle.

Revoke a key

Click Revoke next to any key. Revocation takes effect immediately — any in-flight requests using that key will be rejected.

---

Key Format

All API keys are prefixed with dptb_ followed by 32 random hex characters:

dptb_a3f9c2e1d8b047f6a3f9c2e1d8b047f6

---

Authentication

Pass your key as a Bearer token in the Authorization header on every request:

Authorization: Bearer dptb_your_key_here

---

Security

• Store keys in environment variables or a secrets manager — never in source control
• Create separate keys for each environment (production, staging, CI)
• Revoke and rotate keys if they are ever exposed