The Nomod API lets you embed Nomod's payment features directly into your own app, website, or business system. With it, you can create and manage Links, Invoices, and Charges, handle refunds, and manage your team and customers, all from within your own platform.

API keys are how your platform authenticates with Nomod. Each key is unique to your account and gives your integration permission to use Nomod's features on your behalf.

You can create a single key for one integration, or separate keys if you run more than one website, app, or platform. Each key works independently, and revoking one does not affect the others.

Creating an API key

Go to Settings > Tools & customisations > Apps & APIs
Select Nomod API and tap Create API
Enter a name that describes where the key will be used
Tap the copy icon to copy the key immediately

Viewing your API keys

All your active API keys are listed under Settings > Tools & customisations > Apps & APIs > Nomod API. Each key shows its name, the last time it was used, and when it was created. This helps you track which keys are still in use and identify keys that may no longer be needed.

Editing an API key

You can update an API key's name and website URL at any time.

Go to Settings > Tools & customisations > Apps & APIs
Select Nomod API
Tap ⠇ beside the key you want to edit
Select Edit
Update the name and website URL
Tap Save

Revoking an API key

Revoking a key stops it from working immediately. Any integration using that key will stop working as soon as the key is revoked.

Go to Settings > Tools & customisations > Apps & APIs
Select Nomod API
Tap ⠇ beside the key you want to revoke
Select Revoke and confirm

Managing API keys across multiple websites

If you run more than one website, app, or integration, create a separate key for each one. This keeps your integrations isolated and makes it easier to revoke access to one without affecting the others.

Name each key after the website or app it belongs to, such as "Main store" or "Secondary website." When you add a new integration, generate a new key instead of reusing an existing one. If you are unsure which key belongs to which integration, check the last-used timestamp or create a new key with a clear name and replace the old one.

See Authentication to learn how to use your API keys in request headers.