API User and API Key Management

Authentication

Our API uses Bearer Token authentication to secure API interactions. A valid token must be generated and included in the Authorization header for every single API request.

Steps to Obtain an Access Token

1. Use your API credentials shared by Ecobank or obtained from your dashboard to generate an access token by making a POST request to the token generation endpoint:

2. The serviceCode parameter in the payload must specify the name of the service being integrated. Detailed descriptions of the available service codes can be found in the API Service Code section. Additionally, each endpoint includes the respective service code required for its operation.

3. Refer to the API Sandbox environment for sample request and response payloads for implementation.

4. Once you obtain the token, include it in the Authorization header of each subsequent request asAuthorization: Bearer access_token

5. The access token typically expires after five (5) minutes after generation, the refresh token can be used as an extension of the access token for authentication, this has a life span of maximum duration of ten (10). Ensure you implement logic to generate a new token for each request by repeating the authentication process.