Skip to main content
CommercePay issues four credentials when your account is onboarded. All four are required to authenticate and sign your API requests.

Merchant Id

Used for the Abp-TenantId header.

Username

Used for API authentication.

Password

Paired with your API username.

Secret Key

Signs requests and verifies webhooks.
Security Best Practice: NEVER hardcode your Secret Key or Password in client-side code (JavaScript). Always store these credentials securely in your server-side environment variables or a dedicated key vault.