Authentication

The Super Payments API uses API keys to authenticate requests. All API requests must be made over HTTPS - calls made over plain HTTP will fail, as will requests without a valid API key.

You can view and manage your API keys in the Business Portal under Developers → API Keys.

API Keys

Super Payments uses two types of API key:

  • Super key (sk_prod_ / sk_test_) : used for server-side API requests. Keep these secure and never expose them in public repositories, client-side code, or anywhere else publicly accessible. Shown in the Business Portal under Super Keys.
  • Publishable key (PUB_) : safe to use in client-side and front-end code. Shown in the Business Portal under Publishable API Keys.

Keys are issued per API version. Use the API version selector on the API Keys page to see the keys for the version you are integrating against.

Authentication

Pass your Super key in the Authorization header of every request:

curl --location 'https://api.superpayments.com/2026-08-01/payments' \
--header 'Authorization: sk_prod_YOUR_SECRET_KEY' \
--header 'Content-Type: application/json'

For test environment requests, use your sk_test_ key and the test base URL:

curl --location 'https://api.test.superpayments.com/2026-08-01/payments' \
--header 'Authorization: sk_test_YOUR_SECRET_KEY' \
--header 'Content-Type: application/json'

Payment Initiator IDs

Creating a payment via the API also requires a payment initiator ID and a Brand ID, passed in the request body alongside your other required fields. Both are found in the Business Portal under Developers → API Keys → Brand payment initiators and IDs.

Getting Your Credentials

Creating a Super key, finding your Brand ID and payment initiator ID, and the full list of credentials Super issues are covered in Keys and Credentials.