Authentication

Bearer credentials

Send Authorization: Bearer <app_id>.<secret> on every request.

Authorization: Bearer <app_id>.<secret>

An administrator creates and revokes credentials for your organisation.

Use a sandbox credential for examples

Do not paste a production credential into a shared screen or recording. A sandbox credential uses the same host and schemas but returns recorded data marked SANDBOX. See Sandbox. The configured gateway host is kyt-api.alphatok.xyz.

Authentication failures

Invalid or missing credentials return GATEWAY_CREDENTIAL_INVALID. If the account service cannot verify a credential, the gateway returns GATEWAY_ACCOUNT_UNAVAILABLE. See Status Codes.

Check a credential

curl https://kyt-api.alphatok.xyz/api/v2/whoami \
  -H "Authorization: Bearer <app_id>.<secret>"