Reseller integrations use HTTP Basic Authentication. Pass the relevant API key as the username and any value as the password.
A reseller integration uses two types of API key:
- A partner API key authenticates requests to partner-level endpoints used to create and manage sub-accounts.
- A sub-account API key authenticates requests made on behalf of a specific sub-account.
Use the partner API key only for partner-level operations. For actions within a sub-account—such as updating its branding or sending an envelope—use that sub-account’s API key.
Partner API keys are created and managed in the Signable web app. Log in and follow the steps to create an API key.
A sub-account API key is generated when a sub-account is created and included in the POST /companies response. Store the key securely when you receive it.
If you need to retrieve the key later, send GET /companies/{company_id} using your partner API key.
Send the required request using the relevant sub-account API key. For example, use the key when sending POST /envelopes to send an envelope for that sub-account.
Store partner and sub-account API keys securely. Do not expose them in client-side code, include them in logs, or commit them to source control. For more information, see Protect your API keys.