The dashboard
New to Billy? Start with Your account for first sign-in and account status.
Everything you can't do over the API: issue keys, watch your float, chase a webhook, and manage who on your team has access.
Sign in at https://billy.finfactory.dev/partners. Your first login is created by the FinFactory team; from there you invite the rest of your team yourself.
API keys
Issue keys under Developer → API keys. A key is shown exactly once, when you create it — Billy stores only a hash and cannot recover the original. Copy it straight into your secret manager.
Keys are revoked, never deleted. A revoked key stops working immediately, but its record stays so you can always answer "what was this key, and when did it stop?" — which is the question that matters after an incident.
Issue one key per environment or service, so you can revoke a single one without taking everything else down.
Your float
The dashboard home shows Available, Held, and today's payment count, with your full wallet statement underneath — every top-up, reserve, capture, release, refund, and adjustment, with the balance after each.
See Your float for what those numbers mean and how to read the statement.
Payments & top-ups
Payments lists everything you've posted, with its status, biller, amounts, and receipt reference — searchable when a customer asks about one bill. Top Ups tracks funds you've added and whether they've landed.
Webhooks
Webhook Endpoints is where you add URLs and choose which events each receives. Signing secrets are shown once, like API keys.
Webhook deliveries is the log of every attempt Billy has made: the payload sent, the response code, and the body you returned. Failed deliveries can be retried by hand from here.
When you think you missed an event, start here — it will tell you whether Billy sent it and what your endpoint said back. See Webhooks.
Team & roles
Invite colleagues under Account → Team. Invitations are emailed and expire; the invitee sets their own password.
| Role | Can do |
|---|---|
| Owner | Everything, including transferring ownership and removing Admins. Only an Owner can create another Owner. |
| Admin | Everything except owner-only actions — members, organisation details, API keys, webhooks, top-ups, and refunds. |
| Developer | API keys and webhooks, plus read access to payments. Cannot move money or manage the team. |
| Viewer | Read-only. |
Activity log
Account → Activity records who did what: keys issued and revoked, endpoints changed, members invited or removed, settings updated. Secrets are redacted — the log records that a key was issued, never the key.
Account security
Under Settings:
- Profile — your name, picture, and timezone. Every date in the dashboard is shown in the timezone you pick.
- Password — change it here; forgotten passwords reset by email from the login page.
- Two-factor authentication — authenticator app (with recovery codes) or emailed codes. Strongly recommended for anyone who can move money.
- Notifications — choose which emails you get. Low-balance and top-up alerts default on for Owners and Admins, off for everyone else.
- Organisation — your company name, logo, and contact email. Owners and Admins only.
Changing your sign-in email needs your password, and confirmation from the new address — your old address keeps working until then, and gets told the change was requested.