API authentication reference for PIK

Reference for PIK API key authentication: how to pass credentials, token format, and authentication error responses with status codes.

The PIK Open API authenticates requests using API keys. Every request must include a valid API key in the Authorization header using the Bearer scheme.

Authorization header

Authorization: Bearer YOUR_API_KEY

The header value must start with the literal string Bearer (capital B, followed by a space), then your API key.

Example request

curl -X GET https://api.pik.global/v1/payment-links \
  -H "Authorization: Bearer pik_live_abc123xyz"

API key format

PIK API keys follow this format:

pik_{environment}_{random_string}

• pik_live_ — production API key
• pik_test_ — test environment API key (if applicable)

Authentication errors

Status	Code	Description
401	unauthorized	No Authorization header provided, or the key is invalid or revoked
403	forbidden	The API key is valid but does not have permission to perform the requested action

Example error response

{
  "error": {
    "code": "unauthorized",
    "message": "Invalid or missing API key. Provide a valid Bearer token in the Authorization header."
  }
}

Manage API keys

API keys are created and revoked from the PIK Dashboard under Account Settings → API Keys. See Authenticate with the PIK Open API for step-by-step instructions.