Vezmo App

Core Resources · Authentication

Merchant Authentication

Exchange your Merchant API credentials for a temporary access token. The response is wrapped as{ success, message, data: { accessToken: { token, refreshToken } } }. Every subsequent request to protected resources must includedata.accessToken.tokenin the Authorization header as a Bearer token.

Required headers

x-api-key string required

Your unique Merchant API Key (starts with vzm_).

x-api-secret string required

Your secret key used for authentication.

Security warning: never share your API secret or commit it to version control. Always store these values in environment variables.