> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wava.co/llms.txt
> Use this file to discover all available pages before exploring further.

# API Keys

> Managing your API credentials.

# API Keys

Your API keys are available in the dashboard under **Settings > Integrations > API**.

## Key types

| Key                      | Purpose                            | Dashboard                                                                          |
| ------------------------ | ---------------------------------- | ---------------------------------------------------------------------------------- |
| Development merchant key | Testing in the sandbox environment | [app.dev.wava.co/config#integrations](https://app.dev.wava.co/config#integrations) |
| Production merchant key  | Live payment processing            | [app.wava.co/config#integrations](https://app.wava.co/config#integrations)         |

## Where to find your keys

1. Log into the appropriate dashboard (dev or production).
2. Go to **Settings > Integrations**.
3. Under **API**, you'll see your merchant key and webhook configuration.

## Webhook configuration

On the same Integrations page, you can configure your webhook URL. Wava will send POST requests to this URL whenever an order status changes.

## Security

* Keep your keys confidential. Do not share them in public repositories, client-side code, or emails.
* If a key is compromised, contact [soporte@wava.co](mailto:soporte@wava.co) immediately to rotate it.
* Use environment variables or a secrets manager to store keys in your application.
* Never expose your merchant key in client-side (browser) code. All API calls must be made from your server.