Skip to main content

Authentication

Every request to the Tranzzo API must be authenticated. Authentication takes place using HTTP headers and the following variables:

$ curl "https://cpay.tranzzo.com/api/v1/pos/${POS_ID}/orders/0" \
-H "X-API-AUTH: CPAY ${API_KEY}:${API_SECRET}" \
-H "X-API-KEY: ${ENDPOINTS_KEY}"

Use these headers in all API requests to the server, including both GET and POST requests.

Note that header values are case sensitive, but header names are not.
If data about these headers is missing in the request or is incorrect, in this case the response will be returned as follows:

{
"args": {
"code": "S-404"
},
"message": "Invalid pos_id field or credentials"
}
caution

Credentials are confidential. Do not share them with anyone who is not involved in the integration process. You can find out which roles allow users to access your projects' credentials in the Team section.