01 Two things
What do I need from Paddle?
An API key and a notification destination with its signing secret. Paddle has no one-click authorisation, so this is a form rather than a round trip.
The key needs read access to notification settings, transactions, subscriptions, customers and adjustments. If Paddle offers a read-only preset, that is the right one. We never write to your Paddle account.
Sandbox and live are kept apart, on different hosts. A key from one never works against the other, and the card tells you which one you pasted.
What Paddle hands you
- An API key
Starts pdl_live_apikey_ or pdl_sdbx_apikey_. Shown once.
- A signing secret
Starts pdl_ntfset_. On the notification destination.
- Your webhook URL
From Settings, Integrations. Ends in your program id.