Skip to main content
Bob Payments uses a Bearer Token to authenticate every request. The key is sent in the Authorization header:

Key types

Examples

Generating your API key

1

Open the Dashboard

Sign in at app.payments.bob.company and select your project.
2

Open the API Keys page

In the side menu, click API keys.
3

Create a new key

Click New key, give it a descriptive name (e.g. backend-production), and confirm.
4

Copy and store it securely

The key is shown only once. Save it in a secrets manager or an environment variable.
Use environment variables (process.env.BOB_API_KEY) so you never expose the key in your code.
If a key leaks, revoke it immediately from the Dashboard and generate a new one.

Authentication errors

Next steps

Test in the sandbox

Use the sk_test_ key to run the full flow without real money.

Errors

See what to do with each status and error code.