ProcessOut · Authentication Profile

Processout Authentication

Authentication

ProcessOut authenticates every API request with HTTP Basic auth using two project keys: the project ID as the username and a secret API key as the password. Sandbox and production keys are fully separate — the sandbox project ID carries a `test-` prefix and the secret is `key_sandbox_`/`key_test_`; production uses the un-prefixed project ID and a `key_live_` secret. API keys carry per-project permissions set at creation and cannot be edited afterward. The audit-logs endpoint authenticates with the organization ID as username and the API secret as password. Dashboard sign-in additionally supports SAML and OIDC SSO (enterprise).

ProcessOut secures its APIs with http across 1 declared security scheme, as derived from its OpenAPI definitions.

PaymentsPayment OrchestrationSmart RoutingTokenizationCheckoutReconciliationFraud3-D SecureCompany
Methods: http Schemes: 1 OAuth flows: API key in:

Security Schemes

sec0 http
scheme: basic

Source

Authentication Profile

Raw ↑ 
generated: '2026-07-20'
method: searched
source: openapi/processout-openapi.json
docs: https://docs.processout.com/reference/getting-started-with-your-api
description: >-
  ProcessOut authenticates every API request with HTTP Basic auth using two project
  keys: the project ID as the username and a secret API key as the password. Sandbox
  and production keys are fully separate — the sandbox project ID carries a `test-`
  prefix and the secret is `key_sandbox_`/`key_test_`; production uses the un-prefixed
  project ID and a `key_live_` secret. API keys carry per-project permissions set at
  creation and cannot be edited afterward. The audit-logs endpoint authenticates with
  the organization ID as username and the API secret as password. Dashboard sign-in
  additionally supports SAML and OIDC SSO (enterprise).
summary:
  types:
    - http
  http_schemes:
    - basic
schemes:
  - name: sec0
    type: http
    scheme: basic
    detail: project ID (username) + secret API key (password)
    sources:
      - openapi/processout-openapi.json
key_management:
  docs: https://docs.processout.com/docs/api-keys
  permissions_required: Developers > Manage API keys
  immutable: true
  environments_separate: true