Identify the site first.
Requests are scoped to a publisher site. Use the site key for public placement requests and the site secret for HMAC verification on server-side callbacks.
| Value | Where it is used |
|---|---|
site_key | Public identifier used by iFrame, Web SDK, Android SDK and Offers API. |
site_secret | Private value used to verify HMAC-signed postback payloads. |
user_id | Publisher-side user identifier passed through the reward flow. |