Authentication
Secure authentication using API Keys
Authentication Method
The USDTLowFee API uses API Key authentication. All requests must include a valid API Key in the HTTP header.
Request Format
All requests must include the authentication header:
Authorization: ApiKey ak_live_YOUR_API_KEY Create an API Key
- Log in to the dashboard and go to Account Settings
- Click the "API Keys" tab
- Click "Create API Key"
- Enter a descriptive name (e.g., Production, Test)
- Save the generated API Key (shown only once)
⚠️ Security Rules (Must Read)
- Treat API Keys like passwords: shown only once, create new if lost
- Never put in frontend code/repositories: only in server-side environment variables or Secret Manager
- Never put in URL/querystring (prevents log/proxy leaks): only in Authorization header
- Immediately revoke if suspected of being compromised, then create a new key
Revoke an API Key
If an API Key is compromised or no longer needed:
- Go to Account Settings → API Keys
- Find the key to revoke
- Click the "Revoke" button
- Confirm the action
⚠️ After revocation, all requests using that API Key will immediately fail
API Key Rotation
Recommended rotation process:
- Create a new API Key
- Gradually switch to the new key in your application
- After confirming the new key works properly
- Revoke the old API Key
Common Authentication Errors
Unauthorized
401API Key is invalid, expired, or revoked
Solution: Check if the API Key is correct, or create a new API Key
Forbidden
403Insufficient account balance or permissions
Solution: Recharge account balance or check account status