> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pagos.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Pagos API Authentication

<Warning>
  **Legacy API Key Migration**

  As of **September 1, 2026**, you can no longer authenticate requests with product-specific legacy API keys. See the [September 2026 API Migration](/authentication/september-2026-api-migration) guide for more details and migration instructions.
</Warning>

You integrate with all Pagos services via RESTful APIs, secured and authenticated by a unified API key. This guide outlines how to request your API key and authenticate against the APIs:

* [Generate an API key](#generate-an-api-key)
* [Authenticate with the APIs](#authentication)

## Generate an API Key

<Warning>
  Follow these steps to create keys for all Pagos APIs. API keys generated anywhere else in the Pagos Service Panel are legacy keys that stopped working on [September 1, 2026](/authentication/september-2026-api-migration).
</Warning>

To generate an API key:

<Steps>
  <Step>
    Click your **settings** icon in the top-right corner of your Pagos Service Panel.
  </Step>

  <Step>
    Under **Developers**, click **API Keys**.
  </Step>

  <Step>
    In the **API Keys** tab, click **Create API Key** to add a new key to your account.
  </Step>

  <Step>
    In the side panel that opens, set your **Key Name**, then click **Create API Key**.
  </Step>

  <Step>
    Copy your new API Key and store it somewhere secure.

    <Warning>
      This is the only time you can view this key!
    </Warning>
  </Step>

  <Step>
    Click **I've Copied My Keys** to confirm and exit the side panel.
  </Step>
</Steps>

You'll provide this API key with all API requests. Pagos uses this value alone to authenticate requests to our servers; you don't need to provide a password.

## Authentication

The Pagos platform uses API keys to authenticate requests to all our services. To access the API, you must authenticate via Bearer Authentication (e.g. for a cross-origin request). When you make any API request, pass an `Authorization` header in the following format:

```bash theme={null}
Authorization: Bearer <api key>
```

<Warning>
  **Keep in mind:**

  * All API requests must be made over HTTPS; calls made over plain HTTP will fail
  * API requests without authentication will fail
</Warning>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.