Skip to main content
Generate a new App Secret for your account. A 4-digit transaction PIN must be verified before calling this endpoint. 
GET /generate-secret
Generating a new secret immediately invalidates your previous App Secret. Update all systems using the old secret before regenerating.
Verify your transaction PIN first using POST /pin/verify before calling this endpoint.
# Step 1: Verify PIN
curl -X POST 'https://api.yativo.com/api/v1/pin/verify' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{ "pin": "1234" }'

# Step 2: Generate new secret
curl -X GET 'https://api.yativo.com/api/v1/generate-secret' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

{
  "status": "success",
  "status_code": 200,
  "message": "Secret generated successfully",
  "data": {
    "app_secret": "yat_live_aBcDeFgHiJkLmNoPqRsTuVwXyZ123456789"
  }
}
The App Secret is only returned once. Copy it immediately and store it securely in a secrets manager or environment variable.