Credentials
A key pair signs every request in both directions.
| Value | Format | Where it comes from |
|---|---|---|
| key_id | ak_ + 24 hex characters. Travels in the clear. | Issued by your account manager together with the secret |
| secret | 32+ characters | Handed over once, out of band. Stored encrypted, never read back |
| wallet_url | HTTPS URL | Yours. One URL; the action is in the body |
Rotation
A rotated key gets a new pair, and the old one keeps working for 48 hours. Switch your configuration whenever it suits you inside that window. We sign our calls to your wallet with the key you last used towards us, so verify against either of the two you hold.
Revoke stops a key at once. It is for a secret that has leaked, not for an orderly change.