Skip to main content
Available in🇮🇳 India🇲🇾 Malaysia🇸🇬 Singapore🇺🇸 United States
API keys are unique identifiers that let you securely connect your application to Razorpay Curlec’s services. An API key is a combination of the key_id and key_secret, which are required to make any API request to Razorpay Curlec. You will need to add this API key to your code as part of your integration process, ensuring secure access to Razorpay Curlec’s payment services while protecting your data. Essentially, API keys act like passwords for your app, providing safe access to Razorpay Curlec’s payment and other services while protecting your data.
Watch Out!To generate API keys in Live Mode, you must provide the website details where you will collect payments. If you do not have the option to generate API keys in Live Mode. It may be because you are yet to provide your website details. We collect website information during the onboarding process.
  • If you have not shared your website yet, please follow the steps to add your website details. We will verify your website within 3 working days. Once the verification is complete, you can generate API keys in Live Mode.
  • If you have already shared your website details, and they have been verified, you can find the details on your Dashboard. Navigate to Account & Settings → Website and app settings.
  • You can generate API keys in Test Mode without adding a website.
If you still encounter issues, log in to the Dashboard and raise a request with our support team.

​
Generate API Keys

Follow these steps to generate API keys:
  1. Log in to your Dashboard with the appropriate credentials.
  2. Select the mode (Test or Live) for which you want to generate the API key.
    • Test Mode: The test mode is a simulation mode that you can use to test your integration flow. Your customers will not be able to make payments in this mode.
    • Live Mode: When your integration is complete, switch to live mode and generate live mode API keys. In the integration, replace test mode keys with live mode keys to accept customer payments.
  3. Navigate to Account & Settings → API Keys (under Website and app settings) → Generate Key to generate key for the selected mode.
Watch Out!
  • After generating the keys from the Dashboard, download and save them securely. You can use only one set of API keys. If you do not remember your API keys, you must regenerate them from the Dashboard and update them wherever the previous keys were used for payment gateway integrations.
  • API Keys are universal; that is, they are applicable to all websites and apps that you have whitelisted for your Merchant ID.
  • Do not share your API Key secret with anyone or on any public platforms. This can pose security threats to your Razorpay Curlec account.
  • Once you generate the API Keys, only the Key Id is visible on the Dashboard, not the Key secret, as it can pose security threats to your Razorpay Curlec account.
  • Use the Live API Keys to accept live payments and the Test API Keys for test transactions.
Watch Out: Swap your API keys before going liveYour Test Mode API keys only process simulated transactions — no real money moves. If you go live without replacing them with Live Mode keys, customers will see a payment success screen but no payment will be captured or settled.Generate your Live Mode keys from Dashboard → Account & Settings → API Keys → Generate Key (switch to Live Mode first).

​
Regenerate API Keys

You also have the option to regenerate the key if required.
Two-Factor AuthenticationTo regenerate API keys, you must validate your identity via OTP and send it to your registered mobile number. However, this step is skipped if you already performed OTP validation while logging in to the Dashboard.If you have not set up two-factor authentication, you will be prompted to verify your mobile number before regenerating keys.
To regenerate API key:
  1. Log in to the Dashboard.
  2. Select the mode from the menu ribbon for which you want to generate the API key.
  3. Navigate to Account & Settings → API Keys (under Website and app settings) → Generate new key to generate key for the selected mode.
This allows you to deactivate the old key immediately or within 24 hours.

​
Frequently Asked Questions (FAQs)

​
Common

No, if you have only one MID, you can generate only one API key.
Yes, you can generate one API key for each MID if you have multiple MIDs.
Yes, if your existing API key is saved, you can continue using the same keys as you expand to new platforms.
If you do not have the previous API key saved, you must regenerate new API keys and relaunch all previous products or apps with the updated keys.
Website details are required to generate API keys. If you do not have the option to generate API keys, it may be because website details are yet to be provided. If you have not shared your website yet, please follow the steps to add your website details. We will verify your website within 3 working days, and once the verification is complete, you can generate API keys.
Your website or app link must be verified to generate an API key. This step ensures that only verified sources (website/app) can collect payments through the payment gateway.
Only users with the Owner or Admin role have access to the API keys. Know more about standard user roles & permissions.
Yes, you can use the same set of Live Mode API Keys on multiple websites or domains.The Live Mode keys are tied to your single Razorpay Curlec account, allowing them to process live transactions from any domain where they are implemented. Using the same keys on a new website will not impact the live payments running on your existing, whitelisted website.For Testing:We strongly recommend using your Test Mode API Keys when integrating Razorpay Curlec on any new website. Test payments are simulated and ensure that your live payment processing on existing sites remains unaffected during development.
Watch Out!Ensure your new website’s domain is whitelisted in your Razorpay Curlec account to avoid payment disruptions once you switch to Live Mode.

​
Shopify

No, API keys are not required to integrate a payment app with Shopify. OAuth is to handle the authentication process.
If you are integrating a non-payment app with Shopify, only the API key is required and not the key_secret. However, Shopify does not require API keys to integrate payment apps.
Only users with admin role access can access the case_key.
Yes, you can use the same set of Live Mode API Keys on multiple websites or domains.The Live Mode keys are tied to your single Razorpay Curlec account, allowing them to process live transactions from any domain where they are implemented. Using the same keys on a new website will not impact the live payments running on your existing, whitelisted website.For Testing:We strongly recommend using your Test Mode API Keys when integrating Razorpay Curlec on any new website. Test payments are simulated and ensure that your live payment processing on existing sites remains unaffected during development.
Watch Out!Ensure your new website’s domain is whitelisted in your Razorpay Curlec account to avoid payment disruptions once you switch to Live Mode.
API Keys are generated and managed by the Owner or Admin roles in the Dashboard. Razorpay Curlec does not offer a separate Developer Access Role.To securely facilitate integration and testing (for example, for platforms like WooCommerce, where direct API key input might be required for some plugins), follow this standard workflow:
  • Phase 1: Testing (Integration) The Owner or Admin must generate and securely share the Test Mode API Keys with the developer. The developer will use these keys to build and test the integration without affecting any live payments.
  • Phase 2: Go-Live Once testing is complete, the Owner or Admin must generate the Live Mode API Keys and provide them to the developer to replace the Test Keys in the final application setup.
This ensures security and maintains clear control over your live payment environment.