Authentication
How API keys work, which endpoints need one, and how to rotate a key.
Every account and trading endpoint takes an API key. The market data endpoints are public and take none.
Send the key in either header:
Authorization: Bearer mm_ak_a1b2c3d4e5f60718.xxxxxxxxxxxxxxxxxxxx
X-API-Key: mm_ak_a1b2c3d4e5f60718.xxxxxxxxxxxxxxxxxxxxA key is shown once when it is issued. It cannot be recovered, only reissued.
Rotation
Key rotation overlaps rather than cutting over. WolfEdge issues a second key while your first is still live, you migrate at your own pace, and the old key is revoked once you confirm it is idle. Nothing has to happen at a particular moment.
Request a new key, or revoke one you believe is exposed, through Support. Quote the part before the dot, never the part after it.
Need help
Write to support@wolfedgelabs.com and include your party ID.