API authentication

EduWallet uses Bearer tokens issued per integration.

GET /api/public/verify?code=EDU-8Q7R-2XZ4
Host: api.eduwallet.ug
Authorization: Bearer sk_live_xxxxxxxxxxxx

Scopes

• verify:read — public verification
• students:read — read student roster
• fees:write — post payments

Rotation

Rotate tokens from Admin → API Keys. Old tokens are honored for 24 hours after rotation.