Security Protocol

Infrastructure Authentication

The PosNova API uses secure Bearer Tokens to authenticate requests. Your API keys carry high privileges – treat them as carefully as you would your own administrative credentials.

Obtaining Keys

01
Log in to your Admin Panel.
02
Navigate to Settings > Developer API.
03
Click on Generate New API Key.
04
Give your key a descriptive name (e.g., "Shopify Sync Script").
05
Copy your raw key securely. It will never be shown again.

Bearer Implementation

Include your key in the Authorization header of every HTTP request, strictly prefixed with the word Bearer.

curl https://api.posnova.store/v1/products \
  -H "Authorization: Bearer pn_live_YourSuperSecretKey" \
  -H "Content-Type: application/json"

Security Lockdown

Never expose secret keys in client-side code (React/Vue/Mobile apps) or public repositories. Leaked keys can lead to unauthorized data manipulation or deletion across your global organization.

Protocol: v1.0 Standard

Products API