Authentication - Finup API

Finup API integrations authenticate with API keys. Send your API key in the x-api-key header on every request.

API key request

curl --request GET "https://api.finup.io/backend/account" \
  --header "x-api-key: $FINUP_API_KEY"

Keep API keys server-side. Do not put them in browsers, mobile apps, logs, analytics events, or customer-visible error messages.

Response envelope

Successful responses are usually wrapped in result.

{
  "result": {
    "status": true
  }
}

Authentication failures return 401.

{
  "status_code": 401,
  "error_code": "UNAUTHORIZED",
  "error_message": "Unauthorized"
}

API keys work only while API access is enabled for the account. Each request also runs with the permissions of the member who owns the key, so a missing permission returns 403.