There are four different methods used in the API to create, read, update, and list checkout recources. There is also a method to validate API credentials and get basic information about an account.
The authorization used is basic authentication and you need a Agent ID and an API-key to call these methods. The parameters are used to create an auth-string which is used in the message headers to authorize calls.
Auth-string = Base64 representation of “agent_id:api_key”
Merchant information:
agent_id = 1234
api_key = dc157182-e25a-4008-bd09-903df3428db4
Combined these give us a credential string:
1234:dc157182-e25a-4008-bd09-903df3428db4
Which base64-encoded gives us the auth-string:
MTIzNDpkYzE1NzE4Mi1lMjVhLTQwMDgtYmQwOS05MDNkZjM0MjhkYjQ=