Authentication

All requests to the Storrik API must be authenticated using an API key.
Requests without valid authentication will return a 401 Unauthorized error.

API Key Types

Storrik now supports two types of API keys:

Public API Keys

Safe to use in the browser or public environments.
These keys allow limited actions such as starting a checkout or creating a payment intent.
They cannot access sensitive data and cannot modify account level resources.

Example format:

pk_live_123

Secret API Keys

Full access keys intended for backend servers only.
These keys can manage stores, products, webhooks, checkouts, and full account level operations.
Never expose a secret API key in client side code.

Example format:

sk_live_123

Sending Authentication

Use the Authorization header.
Both key types use the same format.

Authorization: Bearer sk_live_123

API Versioning

Each response includes the API version that processed the request.

api-version: 2025-11-07.alpha

You can override the version used for your request by sending the same header:

api-version: 2025-11-07.alpha

If no version is provided, the latest stable build is used automatically.

You can also change your default API version directly from the dashboard.
This lets you upgrade or lock your integration to a specific version without modifying your code.