Authenticate with the Webacy API using API keys

API Keys

All API requests require authentication using an API key passed in the x-api-key header.

Getting Your API Key

Visit developers.webacy.co to sign up
Generate your API key
Copy and securely store your key

Keep your API key secure. Do not expose it in client-side code or public repositories.

Troubleshooting API key creation

If you hit an error while creating a key on developers.webacy.co, try the steps below before contacting support.

Symptom	What to try
`The security token included in the request is invalid` (or a similar session error when clicking Create API key)	Sign out of the developer portal and sign back in. Portal sessions expire and must be refreshed before a new key can be issued.
The Create API key button does nothing, or the page fails to load	Clear your browser cache and cookies for `developers.webacy.co`, then reload. Stale cached assets are a common cause.
Errors persist after re-authenticating and clearing the cache	Retry in a private/incognito window or a different browser to rule out extensions and cookies.
Key was created but immediately returns `401` or `403`	Confirm you copied the full key with no whitespace and that you are sending it in the `x-api-key` header, not `Authorization`. See Authentication Errors below.

If the issue continues after these steps, contact Webacy support with the exact error message and a timestamp.

Using Your API Key

Include your API key in the x-api-key header with every request:

x-api-key: YOUR_API_KEY

Example Requests

curl -X GET "https://api.webacy.com/addresses/0x742d35Cc6634C0532925a3b844Bc454e4438f44e?chain=eth" \
  -H "x-api-key: YOUR_API_KEY"

const response = await fetch(
  'https://api.webacy.com/addresses/0x742d35Cc6634C0532925a3b844Bc454e4438f44e?chain=eth',
  {
    headers: {
      'x-api-key': 'YOUR_API_KEY'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://api.webacy.com/addresses/0x742d35Cc6634C0532925a3b844Bc454e4438f44e',
    params={'chain': 'eth'},
    headers={'x-api-key': 'YOUR_API_KEY'}
)

print(response.json())

package main

import (
    "fmt"
    "net/http"
    "io"
)

func main() {
    req, _ := http.NewRequest("GET",
        "https://api.webacy.com/addresses/0x742d35Cc6634C0532925a3b844Bc454e4438f44e?chain=eth",
        nil)
    req.Header.Set("x-api-key", "YOUR_API_KEY")

    client := &http.Client{}
    resp, _ := client.Do(req)
    defer resp.Body.Close()

    body, _ := io.ReadAll(resp.Body)
    fmt.Println(string(body))
}

Authentication Errors

Status Code	Description
401	Missing or invalid API key
403	API key lacks required permissions
429	Rate limit exceeded (see Rate Limits)

Example Error Response

{
  "message": "Unauthorized"
}

Best Practices

Store your API key in environment variables, not in your code.

Rotate keys periodically - Generate new keys and deprecate old ones on a regular schedule
Use separate keys - Maintain different keys for development, staging, and production
Monitor usage - Check the API Usage endpoint regularly
Revoke compromised keys - If a key is exposed, revoke it immediately in your dashboard
Server-side only - Never expose your API key in client-side code or mobile apps

⌘I

Overview

Stablecoin Risk

RWA Risk (v3)

Vault Risk V3

Vault Risk Rating (V2 — legacy)

Risk DD

Trading DD

Migrations

Authenticate with the Webacy API using API keys

API Keys

Getting Your API Key

Troubleshooting API key creation

Using Your API Key

Example Requests

Authentication Errors

Example Error Response

Best Practices

​API Keys

​Getting Your API Key

​Troubleshooting API key creation

​Using Your API Key

​Example Requests

​Authentication Errors

​Example Error Response

​Best Practices

API Keys

Getting Your API Key

Troubleshooting API key creation

Using Your API Key

Example Requests

Authentication Errors

Example Error Response

Best Practices