Skip to main content

​
Generate API keys

Elite Neo Bank API credentials are required to authenticate requests, generate secure signatures, verify webhooks, and access Sandbox or Production banking services. This guide explains how to generate and manage your API credentials securely using the Elite Neo Bank Developer Console.

​
Before You Begin

Before generating API credentials, ensure:
  • Your merchant account is created
  • Profile verification is completed
  • Banking services are activated
  • Payment Gateway and/or Payout activation requests are submitted

​
Access Developer Console

Login to the Elite Neo Bank Dashboard and navigate to:
The Developer Console allows you to:
  • Generate API credentials
  • Manage API environments
  • Configure webhooks
  • Monitor API access
  • Access integration settings

​
Available Environments

Elite Neo Bank provides separate credentials for:

​
Sandbox Credentials

Sandbox credentials are used for:
  • API integration testing
  • Signature generation testing
  • Webhook testing
  • UAT validation
  • Mock transaction flows
Sandbox transactions do not involve real money movement.

​
Generate Sandbox Credentials

Inside the Developer Console:
  1. Open the Sandbox environment
  2. Click:
  1. Elite Neo Bank will generate:
  • API Key
  • Secret Key

​
Example Sandbox Credentials

​
Credential Components

​
API Key

The API Key is used to identify your merchant account during API requests. Example:
The API Key is sent in request headers:

​
Secret Key

The Secret Key is used for:
  • Signature generation
  • Webhook verification
  • Request authentication
Example:
Secret Keys should always remain private and server-side only.

​
Production Credentials

Production credentials become available after:
  • Compliance approval
  • Banking verification
  • Risk assessment
  • Production onboarding review
Production credentials allow real transaction processing.

​
Example Production Credentials

​
Credential Security Guidelines

Never:
  • Expose Secret Keys publicly
  • Store credentials in frontend applications
  • Commit credentials to Git repositories
  • Share production keys insecurely
Recommended storage methods:
  • Environment variables
  • Secret management systems
  • Encrypted backend storage

​
Environment Separation

Sandbox and Production credentials are completely separate. Never mix Sandbox and Production credentials.

​
Using Credentials in API Requests

Example authenticated request headers: ➡️ Authentication → Headers

​
Signature Generation

All API requests require:
  • HMAC SHA256 signatures
  • UNIX timestamps
  • Secure authentication headers
Signature formula: ➡️ Authentication → Signature
  1. Generate Sandbox credentials
  2. Configure API authentication
  3. Integrate Sandbox APIs
  4. Configure webhook verification
  5. Complete UAT testing
  6. Request Production activation
  7. Generate Production credentials
  8. Move to live environment safely

​
Regenerating Credentials

If credentials are compromised:
  1. Revoke existing keys
  2. Generate new credentials
  3. Update backend systems immediately
  4. Rotate webhook verification secrets
  5. Review API access logs

​
Important Notes

  • Production credentials process real financial transactions
  • Secret Keys should never leave backend systems
  • API credentials are merchant-specific
  • Webhook verification depends on your Secret Key

​
Security Recommendations

Elite Neo Bank strongly recommends:
  • HTTPS-only communication
  • IP whitelisting
  • Webhook verification
  • Replay attack protection
  • Secure credential storage
  • Audit logging
for all production integrations.

​
Best Practices

  • Use separate environments for testing and production
  • Rotate credentials periodically
  • Restrict backend API access
  • Store credentials securely
  • Validate signatures server-side