Merchant API Key Management FAQs
Answers to common questions about managing Merchant API keys in the Orbital client portal, including IP allow lists, key visibility, security and deletion.
What happens to API keys I created before the self-service API key feature?
API keys created before the self-service feature continue to function as normal, but they may not be visible within the client portal.
Why do I need to add an IP address?
Adding an IP address is a vital security feature. It ensures that only trusted, recognisable users with verified IP addresses are authorised to conduct payouts. See How to Whitelist IP Address (IP Allow List).
Why can't I see my API keys after creating them?
The API key is a critical security element and can be viewed only during creation. Copy it and store it securely for future reference. See How to Create API Keys.
Can Orbital see my API keys?
No. API keys are hashed, so they remain confidential and inaccessible to anyone outside your organisation.
What happens when I delete my API keys?
Deleting an API key discontinues the pay-ins or payouts associated with that specific key.
Updated 3 days ago