Authentication

API key

All API requests must include your API key in the X-AUTH-KEY header.

curl https://api.pawapass.com/v2/verifications/ \
  -H "X-AUTH-KEY: YOUR_API_KEY"

To obtain API keys for sandbox and production, contact us. You will receive separate keys for each environment.

https://api.pawapass.com/v2

https://api-sandbox1.pawapass.com/v2

Keep your API key secret. Do not expose it in client-side code or public repositories. All API calls should be made from your server.

401 Unauthorized

API key is missing or invalid.

{
  "statusCode": 401,
  "code": "UNAUTHORIZED",
  "message": "Unauthorized"
}

403 Forbidden

API key is valid but lacks permission for the requested action.

{
  "statusCode": 403,
  "code": "FORBIDDEN",
  "message": "Forbidden"
}