FAQ
The most common questions when integrating the API.
No. Every call uses your real account and balance. To test without spending, use the read-only endpoints (Who am I, List products, Get balance) and only generate keys when you are about to deliver them.
In the panel, under API › Tokens, in the usage example.
No. The token stays only on your server. In the browser or on the customer's computer, anyone could read the token and spend your balance.
Delete the token in the panel: it stops working immediately. Create another one and replace it on your server.
Maybe. Repeat the request with the same Idempotency-Key: if the first call worked, you get the same keys without a new charge; if it did not, the generation happens now. See Idempotency.
It is ready to deliver, with status: DISPONIVEL. When the customer activates it, it becomes ATIVA, and seconds_remaining in List your keys shows how much time is left.
No. The reset is free, but it counts toward the account limit of 30 actions per minute.
Either the token lacks the permission for that endpoint (errors.required_scope says which one), or the key is not yours. See Permissions.
The API answers in Portuguese. Decide by the HTTP status code and the fields documented here, and show or log the message as it comes.
No. Create a new token with the right permissions and delete the old one.