SDK Tokens

SDK tokens authenticate DigetPay SoftPOS and mobile SDK applications. Manage them from the dashboard or Portal API.

Use cases

Dashboard flow

1. Settings → SDK Tokens (label may appear as Terminals on some accounts)
2. Generate token — assign userId, label, terminal ID if applicable
3. Copy tokenPlain once and provision to device over secure channel
4. Deactivate lost or compromised tokens immediately

Generate token (Portal API)

sequenceDiagram
    autonumber
    participant Admin as Merchant Portal
    participant DigetPay as DigetPay Portal API
    participant Device as SoftPOS App

    Admin->>DigetPay: POST /merchant/account/sdk-tokens
    DigetPay-->>Admin: tokenPlain (once), tokenMasked, active
    Admin->>Device: Secure provisioning

{
  "userId": "terminal-user-001",
  "label": "Store Terminal 1"
}

Deactivate token

{
  "active": false
}

PUT /merchant/account/sdk-tokens/USERID

Portal API endpoints

API Reference →

Security

• One token per terminal or app instance where possible
• Never commit tokens to Git or share in chat
• Rotate on staff change or device loss

Related

• SDK Tokens & Authentication
• Dashboard Overview