Authentication

The Hokey API uses API keys to authenticate requests.

Test mode secret keys have the prefix sk_test_ and live mode secret keys have the prefix sk_live_.

Your API keys carry many privileges, so be sure to keep them secure! Do not share your secret API keys in publicly accessible areas such as GitHub, client-side code, and so forth.

Authentication to the API is performed via Bearer API Key auth. Provide your API key as the bearer token value.

"Authorization: Bearer sk_test_4eC39HqLyjWDarjtT1zdp7dc"

All API requests must be made over HTTPS. Calls made over plain HTTP will fail. API requests without authentication will also fail.