Authentication

Send your secret key in the Authorization header of every request:

curl https://api.pointzero.io/v1/cards \
  -H "Authorization: Bearer sk_live_..."

Prefix	Environment
`sk_test_`	Sandbox
`sk_live_`	Production

Create and revoke keys in the Dashboard.

Secret keys give full access to your account. Use them only on your server. Never put them in mobile apps, browser code or public repositories.

A missing or invalid key returns 401. A valid key without access to the resource returns 403.