Authentication
All endpoints authenticate via a bearer API key. The key resolves to the seller who owns it, and that seller is the account every request acts on.
Headers
| Header | Required | Value |
|---|---|---|
Authorization | Yes | Bearer <api_key> |
Content-Type | Yes (write ops) | application/json |
Obtaining a key
- Log in to your SUQO seller account.
- Go to Configuration → API integration.
- Click Generate key. See API Integration.
Auth errors
| Status | Trigger | Body |
|---|---|---|
401 | Missing / malformed / inactive key | {"detail": "Invalid or inactive API key."} |
403 | Owner not KYC-verified | {"status_code": "<kyc_status>", "message": "KYC verification needed to perform this action."} |
Security: Treat your API key as a password. Never share it in client-side code, public repositories, or insecure communication channels.