All API requests require authentication using an API key. The API key must be included in the Authorization header of every request.

How It Works

The PayZu Crypto API uses Bearer token authentication. When you make a request, include your API key in the Authorization header:

Authorization: Bearer your_api_key_here

This mechanism ensures that only authorized clients can access the API resources. The server validates the token on every request and grants the appropriate permissions based on your account configuration.

Obtaining Your API Key

To obtain your API credentials:

Access the PayZu dashboard at https://payotc.processamento.com
Navigate to Settings → API Keys
Generate a new API key
Store the key securely — it will only be shown once

Important: Keep your API key confidential. Do not expose it in client-side code, public repositories, or logs. If you suspect your key has been compromised, revoke it immediately and generate a new one.

Example Request

curl -X GET "https://api.payotc.processamento.com/v1/quotes/rate?symbol=USDT/BRL&type=on_ramp" \
  -H "Authorization: Bearer your_api_key_here" \
  -H "Content-Type: application/json"

Error Responses

If authentication fails, the API returns a 401 Unauthorized error:

{
  "statusCode": 401,
  "message": "Invalid or missing API key",
  "error": "Unauthorized"
}

Common authentication errors:

Status	Cause	Solution
`401`	Missing Authorization header	Include the `Authorization: Bearer <key>` header
`401`	Invalid API key	Verify your API key is correct and active
`403`	Insufficient permissions	Contact support to adjust your account permissions