BursaPay Logo
Knowledge Base
Ticket Sign In
Help Center > Developer Platform & Gateway API > Developer API Key Types and Environment Prefixes

Developer API Key Types and Environment Prefixes

Published 2026-08-23 6 min read
Who is this article for?
This guide is for Developers seeking operational guidance on BursaPay workflows.

UI Navigation Path (Step-by-Step)

  1. Open API Keys.
  2. Generate the required test or live key.
  3. Use publishable keys where client-side access is intended.
  4. Use secret keys for server-side API calls.
Verified BursaPay gateway workflow: Explains publishable and secret keys across test and live environments.

1. Overview & Purpose

The gateway defines pk_test, sk_test, pk_live and sk_live key types.

2. Requirements & Setup

Generate only the key types needed for the environment and client/server responsibility.

3. Step-by-Step Workflow

  1. Open API Keys.
  2. Generate the required test or live key.
  3. Use publishable keys where client-side access is intended.
  4. Use secret keys for server-side API calls.

4. Rules & Troubleshooting

Secret keys must be protected as credentials; live keys should never be exposed in client code.

5. Verification & Next Steps

Store keys in the application's secret-management system.

Was this article useful?

Related Articles

Developer Gateway: Live Mode Verification Gates Developer API Key Rotation, Disable and Revoke
Ask Bursa AI