Authentication

Send your Wallet API key in the x-api-key header with every request. When creating transactions, also send Content-Type: application/json. Wallet endpoints do not require a Bearer token or your app user’s session.

x-api-key: YOUR_WALLET_API_KEY
Content-Type: application/json

Wallet API keys are managed separately from general API keys. By default, a Wallet key allows transactions:azeitonas. Transactions in Caroços require the transactions:caroços permission, managed by administrators.

Store your key in a server environment variable. The full key is displayed when created or regenerated; regenerating it invalidates the previous secret. Disabled or suspended keys cannot access the API.