Gateway/Authentication and permissions
Authentication and permissions
Create a Nodana API key in Developers → API Keys in the dashboard. Select the gateway permissions your backend needs and save the full key when it is shown.
| Scope | Allows |
|---|---|
gateway:read | View gateway payment records and status |
gateway:write | Create payment challenges and validate or authorise paid requests |
Select both permissions to accept payments. To check payment status only, select gateway:read.
Authenticate requests
Send the key in the Authorization header on every gateway request:
Authorization: Bearer <your-nodana-api-key>Use a node in the account the key belongs to. Your backend sends the customer's payment credentials as request data when validating payment; the bearer header always contains your Nodana API key.
Keep the key private
Store the key in your backend's secret configuration. Keep it out of browser code, customer responses, and logs. Revoke and replace it if exposed.
See API authentication for key management.