Developer Tools

Manage API credentials and configure event webhooks

Webhook Signing Secret

Every outbound webhook includes an X-BOpenBanking-Signature header. Verify it with HMAC-SHA256 using this secret to confirm the payload originated from bopen.

Loading…

API Keys

Production

Live

sk_live_••••••••••••••••••••••••••••••a4f2

Last used 2026-07-08

Sandbox

Sandbox

sk_test_••••••••••••••••••••••••••••••c8b1

Last used 2026-07-07

Keep your sk_live_ key secret. Never commit it to version control. Use sk_test_ for development and staging environments.

Register Webhook

Subscribe to events

Registered Webhooks (1)

https://api.merchant.com/v1/payment-callback

payment.settledpayment.failed

Last triggered: 08/07/2026, 10:45:22

Delivery History

No webhook deliveries yet.