API keys and environments

Test and live environments have separate API keys, payment-method connections, Payment Intents, and webhook endpoints.

Key	Prefix	Use it in
Secret key	`sk_`	Server-side Lynq API requests only.
Publishable key	`pk_`	Browser Checkout configuration.

Create and manage keys in Lynq Dashboard. Start with test keys, then create live keys after completing the go-live checklist.

Keep credentials safe

Store secret keys in server-side secret storage.
Never commit keys or send a secret key to the browser.
Pair a publishable key with a Payment Intent client secret from the same environment.
Replace or revoke a key if you believe it was exposed.

A client secret grants access to one checkout session. Do not log, persist, or put it in a URL.

Last modified on August 7, 2026