Authentication

All Debitura APIs require authentication. The method varies by API and integration type.

Quick Reference

Segment	API	Auth Method	Header	Where to Get Keys
Clients	Customer API	API Key	XApiKey	Creditor Portal
Referral Partners	Referral Partner API	API Key	XApiKey	Contact partnerships@debitura.com
Referral Partners	Customer API (via token)	JWT Bearer	Authorization: Bearer	POST /oauth/token
Collection Partners	Collection Partner API	API Key	XApiKey	Partner Portal

Segment-Specific Guides

• Client Authentication — API key authentication for the Customer API
• Referral Partner Authentication — Two-layer authentication with API key and JWT tokens
• Collection Partner Authentication — API key authentication for the Collection Partner API

Common Error Codes

Code	Meaning
401 Unauthorized	Missing or invalid API key/token
403 Forbidden	Valid credentials but insufficient permissions for this resource