Skip to main content
To ensure secure communication, every request sent by the Integrator must include two specific authentication headers. These headers verify your identity and ensure the integrity of the transaction data.

​
Prerequisites

Before you begin, ensure you have the following resources provided by Nayax:
  • A valid Header Hash Key (typically 16 characters), also known as Sign Key.
  • The associated Header Hash Key ID, also known as Sign Key ID.
Your request body must contain the SparkTransactionId field.

​
Authenticate requests

Once you have the required resources, you can start authenticating your API requests to Spark by following the steps below:
  1. Combine the static string IntegratorId with your ID in the following format IntegratorId: {HeaderHashKeyID}. See the example below:
  2. Join the SparkTransactionId from your request body with your Header Hash Key, separated by a semicolon (;), in the following format: SparkTransactionId;HeaderHashKey
  3. Perform a SHA-256 hash on the resulting string using UTF-8 encoding. Resulting hash:
  4. The final header should look like the following:

​
Request example (cURL)

See an example request for the /StartAuthentication endpoint:
Base URLThe Spark API base URL is https://nayax-spark-dmz.nayax.com/api. The same host serves the integration and production environments.

​
See also

Interactive authentication tool

Build and inspect ciphers and signature headers in your browser, no code required.

Payment flows

How authentication fits into the full Spark transaction sequence.