Skip to main content

Authentication

All API requests require authentication using API keys passed in the Authorization header.

Using API Keys

Include your API key in the Authorization header:
curl -H "Authorization: Bearer YOUR_API_KEY" \
     https://api.unipay.com/v1/quote

API Key Permissions

PermissionDescription
readView quotes and transaction status
writeCreate transactions and webhooks
adminFull access including key management

Rate Limits

TierRequests/MinuteMonthly Quota
Free6010,000
Pro300100,000
Enterprise1,0001,000,000
Rate limit headers:
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 59
X-RateLimit-Reset: 1640995200

Security Best Practices

  • Never commit API keys to version control
  • Rotate keys regularly
  • Use environment variables
  • Implement key rotation strategy
  • Monitor API usage for anomalies