Authorisation

To authorise the request, you need to pass two headers:

1. X-Processing-Key – the public key that you can find in your account

2. X-Processing-Signature – the POST body, signed by the secret key HMAC-SHA512. You can find the secret key in your account as well.

For example (in PHP):

$paramsArray = ['key' => 'value'];
$requestBody = json_encode($paramsArray);
$signature   = hash_hmac('sha512', $requestBody, $apiSecret);

Also, for all requests you need to use the next format key in the headers:

"Content-Type": "application/json"

You can compare the validity of the signature that you generate with our example.

To do this the following data will be used:

Secret key: AbCdEfG123456
Request body in JSON format:
{"currency":"BTC","foreign_id":"123456"}

With such data you should receive the following signature:

03c25fcf7cd35e7d995e402cd5d51edd72d48e1471e865907967809a0c189ba55b90815f20e2bb10f82c7a9e9d865546fda58989c2ae9e8e2ff7bc29195fa1ec