> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rach.finance/llms.txt
> Use this file to discover all available pages before exploring further.

# Get your API keys

> Where to find your Payments and CaaS API keys.

Rach has **two separate products**, each with its **own API key**, obtained from its own
dashboard. The keys are not interchangeable — a Payments key returns `401` on CaaS and
vice-versa.

<Warning>
  API keys are secrets. Keep them on your **backend** only — never in a browser, mobile app,
  or git. Rotate a key immediately from the dashboard if it leaks.
</Warning>

## Payments API keys

Used for the Crypto Gateway, WaaS and Swap. Keys are sent in the `X-API-Key` header and
are prefixed `test_sk_` (sandbox) or `live_sk_` (production).

<Steps>
  <Step title="Open the Payments dashboard">
    Sign in at [payments.rach.finance](https://payments.rach.finance).
  </Step>

  <Step title="Go to Developers → API Keys">
    Copy your **test** and **live** keys, or rotate them if needed.
  </Step>
</Steps>

## CaaS API keys

Used for the CaaS B2B endpoints (`/v1/users`, `/v1/transfers`, `/v1/fx`, `/v1/swaps`).
Keys are sent in the `X-API-Key` header and are prefixed `rach_sk_test_` / `rach_sk_live_`.

<Steps>
  <Step title="Open the CaaS dashboard">
    Sign in to your CaaS dashboard.
  </Step>

  <Step title="Go to Developers → API Keys">
    Generate a key, choose test or live, and copy it.
  </Step>
</Steps>

## Which key goes where

| You are calling…                                           | Base URL                                | Key prefix                        |
| ---------------------------------------------------------- | --------------------------------------- | --------------------------------- |
| Gateway / WaaS / Swap                                      | `https://api.rach.finance/api/v1/`      | `test_sk_` / `live_sk_`           |
| CaaS (`/v1/users`, `/v1/transfers`, `/v1/fx`, `/v1/swaps`) | `https://api.rach.finance/caas/api/v1/` | `rach_sk_test_` / `rach_sk_live_` |

Both go in the `X-API-Key` header. See [Authentication](/guides/authentication).