> **API REFERENCE project is now [ONLINE PAYMENTS](https://api-docs.kushkipagos.com/docs/online-payments)** # Kushki API The Kushki API allows you to interact with all the information you need to integrate our payment solutions to your business. It uses API REST, so the URLs are resource-oriented, returns JSON encoded responses, and uses verbs, authentication, and standard HTTP response codes. Before you can integrate the Kushki API, you need to obtain either sandbox or production credentials. To make requests, you have to authenticate each request with your business credentials. If you don't have credentials yet, see the [basic steps](https://docs.kushki.com/co/en/getting-started/first-steps) to start implementing our solutions. ```Production https://api.kushkipagos.com ``` ```UAT(Sandbox) https://api-uat.kushkipagos.com ``` > **Integrate through our partners** > Use Kushki's [e-commerce solutions ](https://docs.kushki.com/mx/plugins/overview) ready-to-install on different platforms (Woocommerce, Magento, Prestashop, and more), no coding required. By using the Kushki API in test mode, it will not affect your data in the production environment or interact with banking networks. To switch between environments, it is necessary to set the URL of the desired environment as well as the keys corresponding to it.

# Explore the API Find in each section everything you need to know to make the information request you want. ![Explore-Kushki-API](https://i.imgur.com/teTjGhk.png)

# Authentication The Kushki API uses API Keys to authenticate requests. You can view and manage your API Keys from the Kushki console. There are two types of keys: * Public key: It allows you to request tokens for certain services as well as query certain information. * Private key: It allows you to perform different operations for your commerce with our API. **It should never be shared.**. You have to make all requests to our API using **HTTPS** and include your business credentials in the request **headers** to authenticate each interaction. > #### Important > > Never expose or share your private key in a public repository, or place it in your client-side code. Securely store your private key and always make requests securely from your server.

# Responses Kushki uses HTTP response status codes to indicate the response of a request (successful or failed) to the API. In general: * Codes in the 2xx range indicate a successful response. * Codes in the 4xx range indicate that the information sent is incorrect (e.g., some parameter required in the request is incorrect or missing). * Codes in the 5xx range indicate a problem with the Kushki servers (these are rare). Check all available error codes in our [error catalog](https://docs.kushki.com/co/en/getting-started/error-codes).

> Got a suggestion on this documentation? [Contact Us](mailto:techwriting@kushki.com)