Authentication

Keys start with sk_live_ or sk_test_ and are shown once. Send them as a bearer token. Scopes: customers read and write, cards read and write, transactions write, rewards read.

Endpoints

GET /me

The business behind the key, plus its plan and scopes.

GET /programs

Active programs with their rules JSON.

Example

curl https://perfito.al/v1/me \
  -H "Authorization: Bearer sk_test_…"

$ch = curl_init('https://perfito.al/v1/me');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $key, 'Content-Type: application/json'],
]);
$data = json_decode(curl_exec($ch), true);

const res = await fetch('https://perfito.al/v1/me', {
  method: 'GET',
  headers: { Authorization: `Bearer ${key}`, 'Content-Type': 'application/json' },
});
const data = await res.json();