Headers on every request
string
required
Your public API key (
pk_…)string
required
Current Unix time in seconds
string
required
HMAC-SHA256 hex of the canonical string (see below)
How to build the signature
- Build this text (four lines, joined by newlines):
- Sign that text with HMAC-SHA256 using your secret
- Send the result as hex in
X-Signature
Example (Node.js)
Request example (curl)
awk '{print $NF}' (not $2) so the OpenSSL hex hash is read correctly. Do not set a shell variable named PATH to the API path — that breaks system commands.
Tips
- Always sign the exact path you request (including
?imeis=…if present) - Keep the secret on your backend only
- Rotate or revoke keys from the Fleeticc website → Partner API (owner only). After rotate, update your server with the new secret immediately.