Authentication
Pass the project API key in the x-api-key header.
Requests with an API key must go over HTTPS only. The key is not required for /status and /health*.
Request headers
| Header | Required | Description |
|---|---|---|
x-api-key | yes | Project key (except /status and /health*). |
accept-language | no | ru or en; localizes the message field of errors. |
x-project-id | no | Checks that the key belongs to the project. It does not switch to another project. |
x-request-id | no | Correlation ID. If omitted, the server generates a UUID. It is not an idempotency key. |
Authorization errors
| HTTP | Code | When it happens |
|---|---|---|
| 401 | MERCHANT_AUTH_REQUIRED | The key is missing or wrong, the project header or environment is wrong, or the IP is not in the allowlist. |
| 403 | ACCOUNT_ACCESS_DENIED | The account lacks access or the feature is disabled, for example withdrawalsEnabled=false. |