Getting started
Authentication
Every request (except /v1/status) needs a secret API key for one store.
Create a key
In the dashboard, open your store → API → New API key. Give it a name you'll recognise, like “Discord bot”. Copy the key straight away – CraftPay only shows it once. Keys start with cp_sk_.
Send the key
Put the key in the Authorization header as a Bearer token:
HTTP
Authorization: Bearer cp_sk_...Keep it secret
A key can read your buyers' e-mail addresses. Only use it on your own server – never in a browser, an app or a public repository. If a key leaks, delete it in the dashboard and make a new one.
Rate limit
Each store can make 120 requests a minute. Above that you get 429 rate_limited – wait a moment and try again.
Stuck? Write to mail@craftpay.net