Overview
Paymint API keys authenticate your application with the Paymint SDK. You need at least one API key to use Paymint in your project.Before creating API keys, make sure you’ve connected your Paddle account first.
Creating an API Key
Create a New Key
Click New API key and fill in:
- Name — A descriptive name (e.g., “Production App”, “Dev Server”)
- Environment — Sandbox or Production
- Description (optional) — Notes about what this key is used for
Security Best Practices
Follow these practices to keep your API keys secure:| Practice | Details |
|---|---|
| Use environment variables | Store keys in .env files, never hardcode them |
| Separate environments | Use different keys for sandbox and production |
| Rotate regularly | Generate new keys periodically and revoke old ones |
| Never expose client-side | API keys are for server-side use only |
| Add to .gitignore | Ensure .env.local and .env are gitignored |
Example .env.local
Key Environments
| Environment | Key Prefix | Use Case |
|---|---|---|
| Sandbox | paymint_test_ | Development and testing |
| Production | paymint_live_ | Live application |
Managing Keys
From the Settings → API Keys page in the Paymint dashboard, you can:- View all your keys with their status and last usage date
- Revoke keys that are no longer needed
- Create new keys for different environments or services
