AffiHQ homeAffiHQDocumentation
Read in French
Browse documentation

API authentication — API/SDK advanced

Use product-scoped server keys safely for API/SDK advanced requests; Stripe automatic does not need them.

Updated August 3, 2026

These credentials are for API/SDK advanced only. Stripe automatic does not need a product API key or fingerprint key; AffiHQ handles its connected Stripe deliveries. For API/SDK advanced, the API base URL is https://affihq.com/api/v1 and every request uses HTTPS and a product-scoped server key.

Authorization: Bearer ahq_sk_xxx
Accept: application/json
Content-Type: application/json

Never expose the key in browser JavaScript, mobile application binaries, URLs or logs. Rotate a compromised key from the product integration panel.

GET/api/v1/integration

Checks the key and returns the product, API version and supported capabilities without returning financial data.

Call this endpoint in the API/SDK advanced flow to confirm the credentials before sending customer or payment events. Test attribution and billing separately after authentication succeeds.

Request IDs

AffiHQ returns an X-Request-Id. Keep it with safe integration diagnostics so support can trace a failure. Do not attach request bodies, raw referral references, customer identifiers, fingerprints or keys to application logs.

Responses

Successful responses wrap their value in data. Errors include a stable code, a safe message, retryable and requestId.

Retry only failures marked retryable. Rate limits and server failures are retryable; a stable 4xx business rejection belongs in your incident or dead-letter workflow.