Trevi
API ReferenceWooCommerceSDKssoonWebhookssoon

Account

Log in

POST/api/merchants/login

Exchange email and password for a merchant JWT. Needed only for the dashboard-only endpoints; storefront integrations should use an API key instead.

  • Rate limited to 5 attempts per 15 minutes per IP. Repeated failures lock the account for 15 minutes.
  • If the account has 2FA enabled, this responds with a challenge instead of tokens — complete it at POST /api/merchants/login/2fa.
  • Prefer an API key for server-to-server work. A JWT is a session credential and expires; an API key does not.

Authentication

No authentication required.

Body parameters

emailstringrequired
passwordstringrequired
POST/api/merchants/login
curl --request POST "https://api.trevi.cash/api/merchants/login" \
  --header "Content-Type: application/json" \
  --data '{ "email": "you@example.com", "password": "…" }'
Was this page helpful?
Previous
Legacy single-payment log
Next
Refresh a token