Authentication

Sudo uses permanent API keys to authenticate requests. Send your API key as a Bearer token in the Authorization header of every API request.

GET /cards HTTP/1.1
Host: api.sudo.africa
Authorization: Bearer $SUDO_API_KEY

API keys do not expire automatically. Store them securely and never expose them in client-side code or source control. An invalid, missing, or deleted API key returns HTTP 401 Unauthorized.

Overview

Getting Started

Cards

Controls

Purchases

Webhooks

Cloud Card