Basics
API Key Rotation
Rotating API Keys
Initial API Keys and Permissions
Your initial API keys will be delivered securely by the program manager. The initial API key will be configured with permissions to write or read certain objects (i.e. payment methods, transactions) based on the agreed upon integration and contract. Only partners who are PCI compliant and whose PCI compliance has been vetted by Imprint will have permissions to read PCI data.
Rotate API Key
Imprint provides the functionality for partners to rotate API keys on your schedule.
To rotate API keys, the steps are
- Create a new API key using the
create API key API
. The newly created API key will have the same permissions as the existing API key used to create the new key. - Update the API key in your systems and ensure your integration is functioning as expected with the new key.
- Then delete the old API key using the
delete API key API
.