Authentication

---

Step 1: Get Your API Key

1. Sign up on the FLIZ app.
2. Go to Installations and select your integration method.
3. Generate and copy your API Key.

note

Your API key carries many privileges and should be kept secure at all times. Follow these best practices to protect your API key:

• Do not share your secret API keys in publicly accessible areas such as GitHub, client-side code, or any other places where unauthorized individuals may access them.
• Store your API key securely in your application's server-side environment variables or secure key management systems.

Step 2: Authenticate Your App

Request

POST https://api.flizpay.de/auth/verify-apikey

Request Body Parameters

Parameter	Type	Description	Required
email	String	End-user’s e-mail address. Passing it lets the user skip any extra user-verification step. The usage of this parameter is mostly for mobile apps and requires previous whitelisting with Fliz.	❌
iban	String	IBAN of the ultimate payment recipient. Omit it to use the company IBAN you set up.	❌
name	String	Account holder’s name that goes with the iban, shown on the payment confirmation. Omit it to use your own company name you set up.	❌

Required Header

X-API-Key: YOUR_API_KEY

Example Request

curl --request POST \
     --url https://api.flizpay.de/auth/verify-apikey \
     --header 'X-API-Key: YOUR_API_KEY' \
     --header 'Content-Type: application/json' \
     --data '{"email": "user@example.com", "iban": "DE02120300000000202051"}'

Example Response

{
  "token": "JWT_TOKEN"
}