Finup API integrations authenticate with API keys.
Send your API key in the x-api-key header on every request.
API key request
Keep API keys server-side. Do not put them in browsers, mobile apps, logs, analytics events, or customer-visible error messages.
Response envelope
Successful responses are usually wrapped in result.
Authentication failures return 401.