Source: https://docs.debitura.com/collection-partners/getting-started/authentication

# Collection Partner Authentication

Collection Partners authenticate with the Collection Partner API using an API key in the `XApiKey` header.

<a id="getting-your-api-key"></a>

## Getting Your API Key

Generate API keys via the [Partner Portal](https://partner.debitura.com/CollectionPartnerApiKey/Index):

1.  Navigate to **API Keys**
2.  Click **Create New Key**
3.  Store the key securely (it won't be shown again)

**Note:** Requires the Admin role.

<a id="making-requests"></a>

## Making Requests

Include your API key in the `XApiKey` header:

```http
GET /cases HTTP/1.1
Host: collectionpartner-api.debitura.com
XApiKey: YOUR_API_KEY
Content-Type: application/json
```

Verify your key works by calling `GET /me`.

<a id="portal-vs-api-authentication"></a>

## Portal vs API Authentication

The web portal at [partner.debitura.com](https://partner.debitura.com/) uses email/password authentication with session cookies. API keys are exclusively for programmatic access.

For base URLs and testing approach, see [Environments](https://docs.debitura.com/developer-concepts/environments.md). For request limits, see [Rate Limiting](https://docs.debitura.com/developer-concepts/rate-limiting.md). For endpoint details, see the [Collection Partner API Reference](https://docs.debitura.com/api/collection-partner.md).