Generate API Keys
You need an API key and a secret key to call any authenticated endpoint.
Generate the keys
- Sign in to CoinSwitch PRO Profile → API Trading.
- Generate a new key pair. Both keys are displayed once — copy and store them somewhere secure.
- The keys are hex-encoded strings. The API key is your Ed25519 public key; the secret key is your Ed25519 private key.
If you can't generate keys via the UI for any reason, email api@coinswitch.co from your CoinSwitch-registered email address with a request.
Storing keys safely
- Never share your secret key with anyone, including CoinSwitch support.
- Don't commit keys to git, paste them in chat, or hard-code them in shipped applications.
- Rotate immediately if you suspect a leak — generate a new pair and revoke the old one from the same Profile screen.
You can have one API key + secret pair active at a time. Generating a new pair invalidates the previous one.
Using the keys
The API key is sent in the X-AUTH-APIKEY request header. The secret key is never sent over the wire — it is used locally to sign each request. See Authentication for the exact signature format, and Reference Client for drop-in code.