---
title: Authentication
description: Authenticate requests to the Apipay API with your secret key.
---

:::note
This is dummy placeholder content for scaffolding purposes.
:::

Every request to the Apipay API must include a bearer API key:

```bash
Authorization: Bearer sk_live_...
```

Use a `sk_test_...` key against the sandbox server, and a `sk_live_...` key in production. Never expose a secret key in client-side code.