Authentication

All API endpoints require HMAC-SHA256 signature authentication for secure API access.

Required Headers

  • X-API-Key: Your API key
  • Authorization: HMAC-SHA256 signature (format: HMAC-SHA256 {"{signature}"})
  • X-Timestamp: Request timestamp for replay protection (Unix timestamp in milliseconds)

Signature Generation

The signature is generated using HMAC-SHA256. Components: METHOD (HTTP method), PATH (request path without query parameters), TIMESTAMP (Unix timestamp in milliseconds), BODY (empty string for GET without params, queryParams.toString() for GET with params, JSON string for POST, or URLSearchParams for multipart/form-data text fields only).

data = METHOD|PATH|TIMESTAMP|BODY
signature = HMAC-SHA256(ACCESS_KEY, data)

Example (Node.js)

See the Full API Documentation for complete code examples.