Skip to main content
Seyaha uses one authentication schemes depending on the API you’re calling. All API’s endpoints require a JWT in the Authorization header:
How to get a JWT: Log in through the Seyaha platform (partner portal, reseller portal or affiliate onboarding). JWTs are short-lived — refresh them before expiry using the auth refresh endpoint.
Treat your API token like a password. Never expose it in client-side code or public repositories. If compromised, contact [email protected] immediately.

​
Webhooks — Webhook Secret

When your partner integration is created, Seyaha generates a webhook_secret and returns it in the creation response. Use it to authenticate inbound webhook calls to Seyaha:
The secret is stored hashed — it is only shown once at creation time. If you lose it, delete and recreate the integration.

​
Quick reference