Authentication

PapelShip uses API Keys and Store Hashes to authenticate requests. You can manage your API keys in your store dashboard profile.

Required Headers

Include the following headers with every request:

Header	Description	Example
X-API-KEY	Your secret API key. Keep this secure.	pk_live_a1b2c3d4...
X-STORE-HASH	The unique identifier hash for your store.	store_xyz123...

Making a Request

Here's an example of how to authenticate a request using curl:

cURL Example

curl -X GET "https://ship.sellpass.io/api/v1/products" \
  -H "Content-Type: application/json" \
  -H "X-API-KEY: your_api_key_here" \
  -H "X-STORE-HASH: your_store_hash_here"

curl -X GET "https://ship.sellpass.io/api/v1/products" \
  -H "Content-Type: application/json" \
  -H "X-API-KEY: your_api_key_here" \
  -H "X-STORE-HASH: your_store_hash_here"

Security Best Practices

Never expose your API keys in client-side code (browsers, mobile apps).
Rotate your keys immediately if you suspect they have been compromised.
Use the IP Whitelist feature in your dashboard to restrict access to trusted servers.