> ## Documentation Index
> Fetch the complete documentation index at: https://docs.commercepay.asia/llms.txt
> Use this file to discover all available pages before exploring further.

# API Credentials

> Credentials issued by CommercePay for authenticating API requests.

CommercePay issues four credentials when your account is onboarded. All four are required to authenticate and sign your API requests.

<CardGroup cols={2}>
  <Card title="Merchant Id" icon="id-badge">
    Used for the Abp-TenantId header.
  </Card>

  <Card title="Username" icon="user">
    Used for API authentication.
  </Card>

  <Card title="Password" icon="lock">
    Paired with your API username.
  </Card>

  <Card title="Secret Key" icon="key">
    Signs requests and verifies webhooks.
  </Card>
</CardGroup>

<Warning>
  **Security Best Practice:** **NEVER hardcode** your Secret Key or Password in client-side code (JavaScript). **Always** store these credentials securely in your server-side environment variables or a dedicated key vault.
</Warning>