Skip to main content
PayGood uses API keys — bearer tokens — to authenticate every request you make to the API. Your key identifies your account and authorizes all API calls made on your behalf. Keep your key safe and never share it publicly.

​
Get your API key

1

Log in to the PayGood dashboard

Go to dashboard.paygood.com and sign in with your PayGood account credentials.
The dashboard URL differs by environment: use dashboard-sandbox.paygood.com for sandbox and dashboard.paygood.com for production.
2

Navigate to Developers

In the left-hand navigation, click Developers.
3

Create a new key and copy it immediately

Click Create Key, give it a descriptive name (for example, Production – Backend Server), and click Generate. Copy the key as soon as it appears — PayGood displays the full secret only once and cannot retrieve it afterward. If you lose the key, you must rotate it and generate a new one.
4

Store your key securely

Save the key in a secure location such as an environment variable or a secrets manager. Never paste it directly into your source code.

​
Set your key as an environment variable

Store your API key in an environment variable rather than hardcoding it in your application. For example, in a Unix shell:
Your application can then read the key from the environment at runtime:
Protect your API keys. Never commit keys to source control — even in private repositories. Rotate any key that you suspect has been exposed. Use separate keys for your sandbox and production environments so a leaked sandbox key cannot affect live transactions.
Once you have your key, learn how to pass it on every API request in the Authentication guide.