Integration guides
Authentication
The Apaczka API v2 authenticates every request with an HMAC-SHA256
signature. There are no tokens or sessions — each call carries your
app_id and a signature computed from the request itself using your
app_secret.
- Get your
app_idandapp_secretin the Apaczka panel under Settings → API. - Sign every request as described in Request signing (HMAC).
Integrating from PHP? The official SDK signs every request automatically — you only pass the credentials to the client and never touch the signature yourself.
Keep the app_secret server-side only — never embed it in mobile apps or
frontend code.
Last modified on