API authentication

The Partnero API uses Bearer token authentication. Every API request must include your API key in the Authorization header.

Getting your API key

Access your Partnero dashboard.

Navigate to API settings

Select your program, then go to Integration → API.

Generate a new key

Click Create API key, give it a descriptive name, and copy the generated key.

Store your API key securely. Never expose it in client-side code, public repositories, or share it publicly.

Using your API key

Include the API key in the Authorization header of every request:

Authorization: Bearer YOUR_API_KEY

Example request

curl --location 'https://api.partnero.com/v1/partners' \
  --header 'Accept: application/json' \
  --header 'Authorization: Bearer YOUR_API_KEY'

Authentication errors

Status Code	Error	Solution
401	Unauthorized	Check that your API key is correct and not expired
403	Forbidden	Verify your account has API access and the key has required permissions

Best practices

Use environment variables

Store API keys in environment variables, not in your codebase:

export PARTNERO_API_KEY="your_api_key_here"

Rotate keys regularly

Periodically generate new API keys and revoke old ones to maintain security.

Use separate keys for environments

Create different API keys for development, staging, and production environments.

Server-side requests only

Make API calls from your server, never from client-side JavaScript. Use the JavaScript SDK for client-side tracking.

Program-specific requests

Each API key is scoped to a specific program. When making requests, the API automatically uses the program associated with your key.

If you manage multiple programs, create separate API keys for each program.

GetRetrieve program details, statistics, settings, and portal configuration.

Overview

Program

Partners

Customers

Transactions

Leads

Referral links

Coupons

Promotion codes

Webhooks

Refer-a-friend

Newsletter referral

API authentication

Getting your API key

Using your API key

Example request

Authentication errors

Best practices

Program-specific requests

​Getting your API key

​Using your API key

​Example request

​Authentication errors

​Best practices

​Program-specific requests

Getting your API key

Using your API key

Example request

Authentication errors

Best practices

Program-specific requests