Authentication

Secure authentication using API Keys

Authentication Method

The USDTLowFee API uses API Key authentication. All requests must include a valid API Key in the HTTP header.

Request Format

All requests must include the authentication header:

Authorization: ApiKey ak_live_YOUR_API_KEY

Create an API Key

  1. Log in to the dashboard and go to Account Settings
  2. Click the "API Keys" tab
  3. Click "Create API Key"
  4. Enter a descriptive name (e.g., Production, Test)
  5. Save the generated API Key (shown only once)

⚠️ Security Rules (Must Read)

  1. Treat API Keys like passwords: shown only once, create new if lost
  2. Never put in frontend code/repositories: only in server-side environment variables or Secret Manager
  3. Never put in URL/querystring (prevents log/proxy leaks): only in Authorization header
  4. Immediately revoke if suspected of being compromised, then create a new key

Revoke an API Key

If an API Key is compromised or no longer needed:

  1. Go to Account Settings → API Keys
  2. Find the key to revoke
  3. Click the "Revoke" button
  4. Confirm the action

⚠️ After revocation, all requests using that API Key will immediately fail

API Key Rotation

Recommended rotation process:

  1. Create a new API Key
  2. Gradually switch to the new key in your application
  3. After confirming the new key works properly
  4. Revoke the old API Key

Common Authentication Errors

Unauthorized

401

API Key is invalid, expired, or revoked

Solution: Check if the API Key is correct, or create a new API Key

Forbidden

403

Insufficient account balance or permissions

Solution: Recharge account balance or check account status