Skip to main content
The Developer page (header: “Developer”, description “Technical integration workspace for API keys, audit-backed logs, and API health.”) is where technical teams manage credentials and check on the health of their integration.
Everything here is a thin layer over the same API your own services use. API keys created here work identically to keys created via Create an API key.
A banner on this page notes the current launch scope:
Outbound webhook setup is hidden for launch because delivery workers and retry handling are not enabled yet. Launch scope is limited to API keys, integration logs, and core API health.
Three tabs are available: API keys, Integration logs, and API status.

​
API keys

Backed by the API key endpoints: The table lists each key’s name, prefix, scopes, status, creator, and last-used time. Managing keys requires the api_keys_manage permission.

​
Creating a key

1

Choose a name

A human-readable label, e.g. “Production integration”.
2

Select scopes

Pick one or more scopes for the key:
Scope
payment_intents:write
payment_intents:read
reconciliation_cases:read
imports:write
imports:read
exports:read
api_keys:manage
By default, new keys are pre-selected with payment_intents:read and reconciliation_cases:read.
3

Set an expiry

Specify how many days from now the key should expire. The dashboard converts this to an absolute expiresAt timestamp before calling the API.
4

Save the plaintext key

On creation, the API returns the key’s plaintext value exactly once in the response. The dashboard shows it in a “Save your API key” step with a copy button and a warning:
This key will only be shown once. Copy it now and store it securely. After closing this dialog, only the prefix is visible.
After this point, only the key’s prefix is ever shown again — the plaintext cannot be retrieved later through the dashboard or the API.

​
Editing and revoking

Selecting an existing key opens an edit modal where you can change its name and scopes (Update an API key). Revoking a key (Revoke an API key) is irreversible — a revoked key’s status changes and it can no longer authenticate requests.
Revocation is permanent. There is no “unrevoke” — create a new key if a service needs to be reconnected.

​
Integration logs

This tab shows a paginated list (five per page) of recent activity, sourced from List audit events (GET /v1/audit-events?limit=100). Each entry shows:
  • A formatted timestamp (from occurredAt)
  • The actor that performed the action, shown as the log’s source
  • A message — either the event’s message field, or its eventType if no message was recorded
This gives developers a lightweight activity feed without needing to build their own audit viewer. For full filtering (by event type, actor, related case, or related payment intent, plus date range), use the Audit page or call GET /v1/audit-events directly.

​
API status

This tab shows the operational status of the ReconLayer API your organization is calling, derived from Get API health (GET /health). The dashboard reports the service as Operational when the health check returns status: ok, along with the timestamp of the last successful check.
This tab reflects the live result of a health check against the API at request time — it is not a historical incident log. For build-your-own status pages or alerting, poll the health endpoint directly.

​
Outbound webhooks (not yet enabled)

The API includes a full set of outbound webhook endpoints for registering endpoints and inspecting delivery attempts: These endpoints exist in the API but the dashboard does not yet surface a configuration screen for them, since the delivery worker and retry handling are still being built out. Managing webhook endpoints currently requires calling these endpoints directly and requires webhooks_manage.

​
From here

Authentication

How to use API keys created here to authenticate requests.

List audit events

Query the same activity feed shown in Integration logs, with full filtering.

Get API health

Check API status directly, for example from a status page or monitor.

Audit

The full, filterable audit trail across cases, imports, and admin actions.