Authentication 101: “Show your pass, please” 🔐

Inkress uses two layers:

• Bearer JWT (private, identifies a logged-in user or service)

• Client-Id header (public, identifies your merchant/app) → m-{merchant.username}

  • This may be necessary if you are not using a merchant token, eg. your token is a global token for an organisation which manages multiple merchants

Base URLs

• Live: https://api.inkress.com/api/v1

• Dev: https://api-dev.inkress.com/api/v1

Quick test (list merchants)

curl -X GET "https://api.inkress.com/api/v1/merchants" \
  -H "Authorization: Bearer YOUR_JWT" \
  -H "Client-Id: m-yourstore"

Common gotcha
If you get auth errors, double-check:

• You sent both headers where required

• Your Client-Id exactly matches m-{merchant.username}