The MpesaFlow API uses API keys to authenticate requests. You can view and manage your API keys in your settings page under the security tab in MpesaFlow.

API Keys are under Settings > Developers > API Keys

Test mode secret keys have the prefix mf_test_ and live mode secret keys have the prefix mf_live_.

Authentication to the API is performed via the Authorization header with a Bearer token. To authenticate, you need to include the Authorization header with the word Bearer followed by your token in your API requests like so:

Authorization: Bearer mf_test_1234567890