Authentication
All Debitura APIs require authentication. The method varies by API and integration type.
Quick Reference
| Segment | API | Auth Method | Header | Where to Get Keys |
|---|---|---|---|---|
| Clients | Customer API | API Key | XApiKey | Creditor Portal |
| Referral Partners | Referral Partner API | API Key | XApiKey | Contact partnerships@debitura.com |
| Referral Partners | Customer API (via token) | JWT Bearer | Authorization: Bearer | POST /oauth/token |
| Collection Partners | Collection Partner API | API Key | XApiKey | Partner Portal |
Common Error Codes
| Code | Meaning |
|---|---|
401 Unauthorized | Missing or invalid API key/token |
403 Forbidden | A Referral Partner test-only operation was called in production |
For segment-specific details, see Client Authentication, Referral Partner Authentication, or Collection Partner Authentication.