API keys

Key	Format	Use it
Public	`pk_live_…`	In the browser
Secret	`sk_live_…`	On your server only. Never in frontend code.

Key

Format

Use it

Public

pk_live_…

In the browser

Secret

sk_live_…

On your server only. Never in frontend code.

Key errors

Missing API key

Returned with status 401 when there’s no Authorization header.

{
  "error": {
    "code": "missing_api_key",
    "message": "Send your API key as: Authorization: Bearer <key>."
  }
}

Invalid API key

Returned with status 401 when the key is wrong, or it was regenerated in Baag App.

{
  "error": {
    "code": "invalid_api_key",
    "message": "That API key isn't valid. It may have been regenerated."
  }
}

Plan required

Returned with status 403 when the store’s plan doesn’t include API access. The keys work again once the store is back on the Basic plan.

{
  "error": {
    "code": "plan_required",
    "message": "This store's plan doesn't include API access."
  }
}

Rate limited

Returned with status 429 when the key sent too many requests in a short time. Wait a moment, then retry.

{
  "error": {
    "code": "rate_limited",
    "message": "Too many requests. Slow down and try again shortly."
  }
}

Key errors