Try it without signing requests
Sandboxsk_test_* keys are exempt from request signing (no X-Signature
or X-Timestamp), so write calls — create a quote, book, cancel — work
end to end from the playground. Production sk_live_* keys must sign every
write; see Authentication.
Paste a sandbox key once in the Authorization field and it carries across
every endpoint for the session. Need a key? Get sandbox access.
Use the spec directly
The machine-readable specification (OpenAPI 3.1, YAML) is served at:Versioning
- URL versioning —
/v1/...; every breaking change creates a new major version. - No breaking change inside v1 — fields are never removed, never renamed, never made required after the fact.
- Deprecation — retired endpoints return a
Sunsetheader (RFC 8594) at least 6 months before removal. - Changelog — every release is documented in the changelog.