SDK Tokens & Authentication
How SDK tokens work for SoftPOS, SmartPOS, and mobile SDK apps.
SDK tokens authenticate device and mobile apps — not server-side payment link APIs.
Token vs API key
| Credential | Used for |
|---|---|
x-api-key | Hosted checkout, S2S, refunds (server) |
| SDK token | SoftPOS app, SmartPOS terminal, mobile SDK |
| Portal Bearer | Dashboard API — create/list SDK tokens |
Generate a token
Dashboard: Settings → SDK Tokens — see Dashboard SDK Tokens
Portal API:
POST /merchant/account/sdk-tokens
Authorization: Bearer {portal_token}
{
"userId": "terminal-user-001",
"label": "Store Terminal 1"
}Response includes tokenPlain once.
Provision to device
| Step | Action |
|---|---|
| 1 | Generate token in dashboard |
| 2 | Enter token in SoftPOS / SmartPOS app setup |
| 3 | App syncs with DigetPay backend |
| 4 | Test transaction on Fin staging |
Security
- One token per device where possible
- Deactivate immediately if device is lost
- Never embed SDK tokens in public app stores without obfuscation — use secure provisioning
Related
Updated about 1 month ago
Did this page help you?