Api-Access-Key header. Sensitive operations—including transfers, withdrawals, and trusted-destination management—additionally require an Ed25519 request signature, supplied in the Api-Signature and Api-Timestamp headers and generated from your private key over the canonical request.
Base URLs
For the exact signing recipe and code samples, see Signing requests. For how authentication, keys, and permission groups fit together, see Setting up.