> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://amer.developers.trustly.com/integrate/api-fundamentals/secure-requests-and-signature-validation/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://amer.developers.trustly.com/_mcp/server.

# Secure requests and validate signatures

Trustly API calls are secured by cryptographic signatures included in all request payloads and event notifications. Request signatures are required for production API requests and SDK operations. Additionally, Trustly recommends that applications verify the signatures included in redirect notifications from Trustly UI SDKs and incoming webhook notifications.

#### [Generate request signatures](/integrate/api-fundamentals/secure-requests-and-signature-validation/generate-request-signatures)

Learn how to create the cryptographic signatures required for all production API requests and SDK operations.

#### [Validate the redirect signature](/integrate/api-fundamentals/secure-requests-and-signature-validation/validate-the-redirect-signature)

Verify the signature included in redirect notifications from Trustly UI SDKs to ensure data integrity upon return.

#### [Validate the notification signature](/integrate/api-fundamentals/secure-requests-and-signature-validation/validate-the-notification-signature)

Implement signature verification for all incoming webhook notifications to confirm their authenticity and data validity.

#### [Encrypt a field value](/integrate/api-fundamentals/secure-requests-and-signature-validation/encrypt-a-field-value)

Detailed guide on using encryption keys to secure sensitive field values within your request payload.

## Docs

- [Generate request signatures](https://amer.developers.trustly.com/integrate/api-fundamentals/secure-requests-and-signature-validation/generate-request-signatures.md)
- [Validate the redirect signature](https://amer.developers.trustly.com/integrate/api-fundamentals/secure-requests-and-signature-validation/validate-the-redirect-signature.md)
- [Validate the notification signature](https://amer.developers.trustly.com/integrate/api-fundamentals/secure-requests-and-signature-validation/validate-the-notification-signature.md)
- [Encrypt a field value](https://amer.developers.trustly.com/integrate/api-fundamentals/secure-requests-and-signature-validation/encrypt-a-field-value.md)