Authentication

Pass the project API key in the x-api-key header.

Requests with an API key must go over HTTPS only. The key is not required for /status and /health*.

Request headers

HeaderRequiredDescription
x-api-keyyesProject key (except /status and /health*).
accept-languagenoru or en; localizes the message field of errors.
x-project-idnoChecks that the key belongs to the project. It does not switch to another project.
x-request-idnoCorrelation ID. If omitted, the server generates a UUID. It is not an idempotency key.
curl "https://api.atomic.wallet/api/v1/project" \
  -H "x-api-key: $API_KEY"

Authorization errors

HTTPCodeWhen it happens
401MERCHANT_AUTH_REQUIREDThe key is missing or wrong, the project header or environment is wrong, or the IP is not in the allowlist.
403ACCOUNT_ACCESS_DENIEDThe account lacks access or the feature is disabled, for example withdrawalsEnabled=false.

Key security