Skip to content

Guide

Authentication

Create an API key in Settings, Developer and send it as a bearer token on every request. Read keys can list data; write keys can also create customers. Keys can be limited to one branch and revoked at any time.

Updated

Create a key in the Nafaa app under Settings → Developer. Keys start with nfk_. Store them in a secret manager or an environment variable, never in a browser app.

Send the key in the Authorization header on every request:

HTTP
GET /api/v1/products HTTP/1.1
Host: api.nafaa.pk
Authorization: Bearer nfk_your_key

Scopes

  • Read keys can call every GET endpoint and manage webhooks.
  • Write keys can also create customers with POST /v1/customers.

A missing or wrong key returns 401. Revoke a key in Settings → Developer and it stops working at once.

Chat on WhatsAppEnglish ya Roman Urdu me