Authentication

Every Merchant API request must include your API key in the x-api-key header.

x-api-key: YOUR_API_KEY

Example

curl https://serviceapi.sarafa.ss/v3/profile \
  -H "x-api-key: YOUR_API_KEY" \
  -H "environment: sandbox"

Status	Meaning
`401`	The API key is missing or invalid.
`403`	The merchant profile or account is not active or could not be found.

If you receive an authentication error, confirm that you copied the correct key and are using the intended environment.

Last modified on July 17, 2026