The Busha Commerce API uses API keys to authenticate requests. You can view and manage your API keys on the Busha Commerce Dashboard for your business.

Generally, we provide only secret keys which is only meant to be used on your back end. The secret keys provide many privileges and are to be kept secure. If for any reason you believe your secret key has been compromised or you wish to change them, you can rotate the key from the dashboard

Test mode secret keys have the prefix test and Live mode secret keys have the prefix live .

Sample Authorization Header

X-BC-API-KEY: {SECRET_API_KEY}

Any API request made without authentication will fail with the status code 401: Unauthorized.

All API requests must be made over HTTPS.