# Access, KYC & key activation
Source: https://paylinky.vercel.app/docs/access-kyc

How merchants get verified and receive live API access.

# Access, KYC & key activation

Paylinky is a regulated payment gateway. Live access is granted in three controlled steps.

## 1. KYC verification

In the app go to **Profile → Verification** and complete the wizard:

1. Choose a document: national ID, passport, driver's license or residence permit.
2. Upload the **front (recto)** of the document.
3. Upload the **back (verso)** (not required for passports).
4. Confirm your legal details.
5. Write your **application**: who you are, what you sell and how you plan to use Paylinky.

Our compliance team reviews the submission. You are notified in-app when it is **approved** or **rejected** (with a reason, so you can resubmit).

## 2. Key request

After approval, request a live key from **Developers → API Keys**. Keys start in the `pending` state. A pending key returns:

```json
{ "error": "key_not_activated", "message": "This API key is waiting for activation by the Paylinky team." }
```

## 3. Activation by an administrator

An administrator reviews and sets the key to `active`. You receive a notification and the key works immediately. Administrators can also `revoke` a key at any time (`401 unauthorized`).

| Key status | Meaning | API behaviour |
| - | - | - |
| `pending` | Waiting for activation | `403 key_not_activated` |
| `active` | Usable | Requests succeed |
| `rejected` | Request declined | `401 unauthorized` |
| `revoked` | Disabled | `401 unauthorized` |

:::note
Sandbox keys are issued instantly and never touch real funds. Live keys additionally require approved KYC (`403 kyc_required` otherwise).
:::