API credentials

Your Merchant ID, Yera API keys, and Security Code for plugins and server-side integrations.

API credentials connect merchant tools to Yera Connect.

They allow WooCommerce, hosted checkout, payment links, and custom backend integrations to create checkout sessions and communicate securely with Yera Connect.

Find them in the dashboard:

Dashboard -> Developers -> API Credentials

Your credentials

  1. Merchant ID - identifies your merchant account. Safe to share with your developer.
  2. Yera Live API Key - keys start with yera_live_. Locked until your account is approved.
  3. Security Code - only needed when you connect or reconnect a website plugin.

Never expose API keys on the storefront, in browser JavaScript, or in public repositories. Keys are shown masked in the dashboard; reveal or copy a value only when you need it.

Live-only access

Use the Live API Key only after:

  1. Company profile is complete.
  2. Account is approved for live use.
  3. Wallet is verified.
  4. Settlement asset is selected.
  5. Production webhook and connection checks have passed.

Only yera_live_ keys authenticate new requests. Historical Test credentials cannot be reused. Do not paste a Live key into an unapproved website.

Connecting a plugin

Using WooCommerce, Shopify, Magento, or another Yera plugin? Paste your Merchant ID, Yera API Key, and Security Code into the plugin. Webhooks are handled automatically — no manual webhook setup is needed.

The same credentials work for every website you connect. Each website gets its own internal connection on the Yera side.

Server-side API requests

Send your API key as a Bearer token from your server:

Authorization: Bearer yera_live_your_api_key

Regenerating credentials

You can regenerate the Live API Key and Security Code from the API Credentials page.

  1. Regenerating an API key may stop plugins or custom integrations that are still using the old key. Your old key keeps working for 24 hours so you can update your plugins.
  2. Regenerating your Security Code prevents new plugin connections from using the old code. Existing connected websites keep working.
  3. The Merchant ID never changes.

If a key is exposed

If an API key or Security Code leaks:

  1. Regenerate it immediately from the API Credentials page.
  2. Update the new value in your plugins or server integration.
  3. Contact support if you see checkout sessions you do not recognize.

We use cookies

Yera Connect uses cookies to keep the website secure, remember preferences, and improve the merchant experience. By selecting Accept, you agree to our Cookie Policy.