Authentication

Every request must include three custom headers.

1. Obtain Your Credentials

  1. Log in to your WiseSub Dashboard.
  2. Click your profile icon → Developer API.
  3. Click + Generate New API Key and enter a name (e.g., “My App”).
  4. You will receive:
    • API Key – public identifier (starts with WS_)
    • API Secret – private token. Shown only once. Copy and store securely (like a password).
⚠️
Important – Your API secret is never retrievable after you close the modal. If lost, regenerate it.

2. Headers for Every Request

HeaderValueDescription
AuthorizationBearer YOUR_API_KEYYour API key
X-API-SecretYOUR_API_SECRETYour secret
X-Environmenttest or livetest = sandbox (no real money); live = production
Acceptapplication/jsonAlways required

Example Headers

Authorization: Bearer WS_abc123456789
                        X-API-Secret: supersecret123
                        X-Environment: test
                        Accept: application/json

3. Regenerating a Secret

  1. Go to Developer API in your dashboard.
  2. Click Regenerate Secret next to your key.
  3. Confirm your account password.
  4. Copy the new secret immediately – the old one becomes invalid.

4. Security Best Practices

  • Never commit your API secret to version control.
  • Use environment variables in your backend.
  • Rotate your secret periodically.
  • Use the test environment for development and testing.