Skip to main content
All Developer API endpoints require authentication via an API key passed as a request header, except for GET /openapi and GET /postman, which are publicly accessible.

​
API key header

Include your API key in every request using the donate-api-key header:
Never expose your API key in client-side code, public repositories, or anywhere it could be accessed by others. All API requests should be made server-side.

​
Error responses

If authentication fails, the API returns one of the following errors: Example error response:

​
Public endpoints

The following endpoints do not require the donate-api-key header:

​
Keeping your key secure

  • Store your API key in environment variables, never hardcoded
  • Do not commit it to version control
  • If your key is compromised, contact us at support@donate.gg to have it rotated

Don't have an API key yet?

Apply for API access