Developers

Authentication

Bearer keys, scoped per environment and capability.

All requests authenticate with a bearer API key:

curl https://api.onzo.la/v1/payments \
  -H "Authorization: Bearer oz_sk_live_..."

Key types

Prefix	Environment
`oz_sk_test_`	Test mode — full API surface, simulated settlement
`oz_sk_live_`	Production — real funds

Keys carry capability scopes (for example payments:write, screening:read, accounts:read). Request the narrowest scope that covers your use case; a key used for a reporting dashboard should not be able to create payments.

Keys are secrets. Server-side only — never in client code, mobile apps, or repositories. Rotate immediately if exposed.

Returns

Idempotency