Publishable key
The SteadPay status API uses a publishable key for authentication. Publishable keys are safe to embed in client-side code (web pages, mobile apps) and are scoped to read-only status lookups for a single tenant.
Publishable keys follow the format pk_live_… (production) or pk_test_… (test mode).
You can find your publishable key in the SteadPay dashboard under Settings → API Keys.
Usage
Pass the publishable key as a Bearer token in the Authorization header:
GET /api/subscriber-status/acme?stripe_customer_id=cus_xxx
Authorization: Bearer pk_live_abc123
Key rotation
You can rotate your publishable key at any time from the dashboard (Settings → API Keys → Rotate). The previous key is invalidated immediately.
After rotating, update the key in all enforcement snippets and SDKs. The old key will return 401 Unauthorized immediately.
