API overview and authentication

The PayFlow API is RESTful and uses JSON for request and response bodies. All API calls require authentication via an API key passed in the Authorization header as a Bearer token.

API keys are generated in Settings > API Keys. Use separate keys for sandbox (testing) and production environments. The sandbox mirrors the production API exactly but processes no real money.