{"templateId":"markdown","sharedDataIds":{},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"HTTP Basic Authentication"},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"http-basic-authentication","__idx":0},"children":["HTTP Basic Authentication"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["All requests to Momnt API must be authenticated using ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["HTTP Basic Authentication"]},". You must include your ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["email (username)"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API password"]}," in every request."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Credentials are sent as ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["username:password"]},", Base64-encoded, in the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Authorization"]}," header. Most HTTP clients handle this automatically."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"using-curl","__idx":1},"children":["Using curl"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Pass credentials with the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["-u"]}," flag:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"bash","header":{"controls":{"copy":{}}},"source":"curl -s -X GET \"https://app-stg.momnt.com/api/v1/sponsor/merchants/\" \\\n  -H \"Content-Type: application/json\" \\\n  -u \"mail@example.com:your-api-password\"\n","lang":"bash"},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"using-the-authorization-header-directly","__idx":2},"children":["Using the Authorization header directly"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"bash","header":{"controls":{"copy":{}}},"source":"curl -s -X GET \"https://app-stg.momnt.com/api/v1/sponsor/merchants/\" \\\n  -H \"Content-Type: application/json\" \\\n  -H \"Authorization: Basic $(echo -n 'mail@example.com:your-api-password' | base64)\"\n","lang":"bash"},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"environments","__idx":3},"children":["Environments"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Environment"},"children":["Environment"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Base URL"},"children":["Base URL"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Staging"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://app-stg.momnt.com/"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Production"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://app.momnt.com/"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use staging for development and testing. API passwords differ between environments."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"callback-authentication","__idx":4},"children":["Callback Authentication"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Endpoints that fire callbacks (e.g., merchant onboarding, consumer applications) also support Basic Auth on the callback URL. You provide Momnt with a username and password, which Momnt stores securely and uses when POSTing to your callback URL."]}]},"headings":[{"value":"HTTP Basic Authentication","id":"http-basic-authentication","depth":2},{"value":"Using curl","id":"using-curl","depth":3},{"value":"Using the Authorization header directly","id":"using-the-authorization-header-directly","depth":3},{"value":"Environments","id":"environments","depth":2},{"value":"Callback Authentication","id":"callback-authentication","depth":2}],"frontmatter":{"title":"Authentication","description":"How to authenticate with the Sponsor API using HTTP Basic Auth","seo":{"title":"HTTP Basic Authentication"}},"lastModified":"2026-06-23T21:58:48.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/docs/authentication","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}