Skip to main content

Configure API Credentials

Create and update an OAuth2 client.

Most API endpoints require authentication with a Client ID and Secret. Each Client ID has a specific set of allowed scopes (Permissions) to access API endpoints. Scopes allowed on an API client may be updated at any time in the Dashboard Admin > API Management section.

Contact your Entity Manager if you need permissions to manage API credentials.

When setting scopes, we recommend following the principle of least privilege and only allow scopes required by a specific application. Scopes for each endpoint are listed in the Authorizations section in the API Reference docs. The Market Data and most Pricing endpoints do not require authorization.

Once the credentials are activated, most users find success using one of the libraries on the OAuth2 website for authentication.

To add or modify API Credentials, you'll need a Developer or other role with appropriate permissions. Contact your Entity Manager for help.

Add API Credentials​

  1. Log in to your Dashboard account and go to API Management.
  2. Click API Credentials.
  3. Create a Label for your API credentials.
  4. Select the Scopes for your Client ID. For example, the following scopes (space delimited) should be adequate to mint, redeem and convert Paxos-issued stablecoins:

    conversion:read_conversion_stablecoin
    conversion:write_conversion_stablecoin
    funding:read_profile
    funding:write_profile
    transfer:read_deposit_address
    transfer:read_transfer
    transfer:read_fiat_account
    transfer:read_fiat_deposit_instructions
    transfer:write_internal_transfer
    transfer:write_crypto_withdrawal
    transfer:write_deposit_address
    transfer:write_fiat_account
    transfer:write_fiat_deposit_instructions
    transfer:write_fiat_withdrawal
  5. Optionall: Add Allowable IP addresses or enable Request Signing.
  6. Click Create Credentials.
  7. Copy the Client ID and Client Secret and store them in a safe place. The secret will not be displayed in the UI again, and it will have to be reset if forgotten.

Update or Delete Credentials​

To make changes to an existing client, select it from API Credentials and click either Edit API Credentials or Delete API Credentials.