Authentication

headers = {
  "Biz-Api-Key": {YOUR_API_KEY}.hex(),
  "Biz-Api-Nonce": {Nonce},
  "Biz-Api-Signature": {YOUR_API_SIGNATURE}.hex(),
}

• Biz-Api-Key: The public key you generate in Generate an API key.
• Biz-Api-Nonce: A nonce is the current time in Unix timestamp format, measured in milliseconds.
• Biz-Api-Signature: The API signature. To learn how to calculate an API signature, see Calculate an API Signature.

​

API key

​

Generate an API key

​

Use OpenSSL

# Generate a private key and save it in the `private.key.pem` file.
openssl genpkey -algorithm ed25519 -out private_key.pem

# Extract the public key from the private key and save it in the `public.key.pem` file.
openssl pkey -in private_key.pem -pubout -out public_key.pem

# Export the private key in hexadecimal format.
openssl pkey -in private_key.pem -text | grep 'priv:' -A 3 | tail -n +2 | tr -d ':\n '

# Export the public key in hexadecimal format.
openssl pkey -pubin -in public_key.pem -text | grep 'pub:' -A 3 | tail -n +2 | tr -d ':\n '

​

Use the Python library

1. Install the ed25519 Python library. In a terminal window, run the following command:
   pip install ed25519
   
2. Generate a key pair. Import the function from the Python library to generate a key pair as follows:
   from ed25519.keys import create_keypair
   
   # Create a key pair
   sk, vk = create_keypair()
   
   # Print the private key in hexadecimal format.
   print("private key:", sk.to_seed().hex())
   
   # Print the public key in hexadecimal format.
   print("public key:", vk.to_bytes().hex())
   

​

Register the API key

​

Nonce

​

Calculate the API signature

1. First, concatenate a string based on your request as follows: str_to_sign = {METHOD}|{PATH}|{TIMESTAMP}|{PARAMS}|{BODY}

   Field	Description	Example
   METHOD	The HTTP method.	GET
   PATH	The API endpoint.	/v2/transactions/transfer
   TIMESTAMP	The current time in Unix timestamp format, measured in milliseconds. This value must be the same as the nonce in the request header.	1718587017026
   PARAMS	(If applicable) The query parameters.	chain_id=ETH&limit=10
   BODY	(If applicable) The raw request body in string format.	{"name":"Default","wallet_subtype":"Asset","wallet_type":"Custodial"}

2. Use the hashlib library to perform SHA-256 hashing twice on the string as follows:
   import hashlib
   content_hash = hashlib.sha256(hashlib.sha256(str_to_sign.encode()).digest()).digest()
   
3. Use the private key of your API key to sign the string as follows:
   # Create an Ed25519 signing Key. Replace `api_secret` with your private key.
   sk = ed25519.SigningKey(sk_s=bytes.fromhex(api_secret))
   # Sign the hashed message
   signature = sk.sign(content_hash)