Authentication

All requests to the Volley API must be authenticated using an API key.

Include your API key as a Bearer token in the Authorization header of each request.

Authorization: "Bearer ${YOUR_API_KEY}"

Volley API keys are secret credentials that grant access to your account's resources. They should only be used in a secure server-side environment. Keep them safe and don’t share them in client-side code or public repositories.

Test and Live Environments

Volley uses two types of API key: test and live.

// Test key: authkey_test_VeBI3n7J:MdLftNqgKsPK9NOgo418CDvZ
// Live key: authkey_live_VeBI3n7J:MdLftNqgKsPK9NOgo418CDvZ

Using a test key limits payment requests to Volley’s test bank only. Test keys are appropriate for use in your staging environment and during development.

Using a live key to create a payment request lets an end-user pay with their real banking app and moves money in the real-world from their bank account to yours.