[ Settings · API keys ]

API keys.

Your provider API key authenticates the PayGate402 middleware calls to the coordinator. Treat it like any other server-side secret. Rotation is instant — old key revoked the moment the new one is minted.

ProviderLoading…
Current key prefix

Rotation is destructive

  • The current key stops working immediately.
  • Update PAYGATE_PROVIDER_API_KEY in your service's env and redeploy.
  • The old prefix stays in the audit log for forensics.
  • If you accidentally rotate, repeat the rotation and update your service.