Access API keys, endpoint reference docs, webhook configurations, and rate limits.
Use this key in the Authorization header: Authorization: Bearer {{ generated_key }}
Add it to your environment variables - never commit API keys to source code.
Authorization: Bearer <key>
| Label | Key Prefix | Scopes | Status | Created | Last Used | Actions |
|---|---|---|---|---|---|---|
| {{ key.name }} |
{{ key.key_prefix }}••••••••••••••••
|
{% for scope in key.scopes %} {{ scope }} {% else %} - {% endfor %} | {% if key.status == 'active' %} Active {% elseif key.status == 'locked' %} Locked {% else %} Revoked {% endif %} | {{ key.created_at|date('M d, Y') }} | {{ key.last_used_at ? key.last_used_at|date('M d, Y H:i') : '-' }} | {% if key.status == 'active' %} {% elseif key.status == 'locked' %} {% endif %} |
| No API keys yet. Generate one above. | ||||||
| URL | Status | Subscribed Events | Secret Key | Actions |
|---|---|---|---|---|
{{ wh.url }} |
{{ wh.status|capitalize }} | {% for evt in wh.decoded_events %} {{ evt }} {% else %} None {% endfor %} |
{{ wh.secret|slice(0, 8) }}••••••••••••••••
|
|
| No webhook endpoints configured. Click "+ Add Endpoint" to register one. | ||||
| Event | Trigger |
|---|---|
payment.completed | Transaction confirmed and marked completed |
payment.failed | Payment attempt failed or expired |
payment.pending | Payment received, awaiting verification |
refund.created | Refund request submitted |
refund.completed | Refund processed successfully |
invoice.paid | Invoice marked as paid |
customer.created | New customer record created |
webhook.test | Manual test event sent from Developer Hub |
| URL Path Pattern | HTTP Method | Max Requests | Window (seconds) |
|---|---|---|---|
{{ rule.path }} |
{{ rule.method }} | {{ rule.limit }} hits | every {{ rule.window }} seconds |
| No custom rate limit rules configured. | |||
| Bucket / Key | Hits | Expires In | Actions |
|---|---|---|---|
{{ limit.key_name }} |
{{ limit.hits }} | {% set remaining = limit.expires_at - now %} {{ remaining > 0 ? remaining ~ 's' : 'Expired' }} | {% if is_superadmin %} {% else %} No Permission {% endif %} |
| No active rate limit blocks or buckets. | |||
When rate limited on standard browser requests, users will see a rate limit page. For API or JSON endpoints, the server returns HTTP 429 with a Retry-After header and a raw JSON payload.
HTTP/1.1 429 Too Many Requests
Retry-After: 30
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 0
{"success": false, "message": "Rate limit exceeded. Try again later."}