Skip to content
English
Submit a Support Ticket
  • There are no suggestions because the search field is empty.

API Keys and Authentication

Create API keys and understand the two authentication methods.

Every API request to PEI is authenticated with credentials you create in the dashboard. Keys are per environment: sandbox keys work only against the sandbox API, production keys only against production.

1. Creating an API Key

  1. Go to Integration → API Integration → API Keys (or the same section in the sandbox).
  2. Click to create a new key and give it a name.
  3. Copy the key immediately. It is shown only once.

API keys become available once your company is approved.

2. Authentication Methods

  • API key – sent in the x-api-key header on every request. Required.
  • Signed token – an additional x-signature-token header carrying a token you sign with your own RSA private key. You register the public key in the dashboard. Recommended for production integrations. The guide is at RSA Public Key.

3. Base URLs

  • Production: https://api.pei.qiibee.com/api/v1
  • Sandbox: https://api.pei-sandbox.qiibee.com/api/v1

4. Keeping Keys Safe

  • Store keys in a secrets manager, never in source code or client-side applications.
  • Create separate keys per system and revoke keys you no longer use.
  • Rotate keys when a team member with access leaves.
  • If a key may have leaked, revoke it in the dashboard immediately and create a new one.

Full endpoint reference: API Documentation.

Need help? Submit a support ticket or email pei@qiibee.com.