Before you start
Account creation and login happen at the dashboard — not through the API.| Environment | Dashboard | API Base URL |
|---|---|---|
| Live | crypto.yativo.com | https://crypto-api.yativo.com/api |
| Sandbox | sandbox-crypto.yativo.com | https://crypto-sandbox.yativo.com/api |
Authentication
Every API endpoint (exceptPOST /auth/token) requires:
Getting a Bearer token
Exchange your API key and secret for a short-lived token. Tokens expire after 60 minutes; API keys never expire.Response
POST /auth/token again before the token expires — no separate refresh endpoint needed.
See Authentication for the full flow including scopes and the auto-refresh pattern.
Common headers
| Header | Required | Description |
|---|---|---|
Authorization | Yes | Bearer YOUR_ACCESS_TOKEN |
Content-Type | Yes (POST/PUT) | application/json |
Idempotency-Key | Optional | Prevents duplicate transactions |
Response format
"status": false with an appropriate HTTP status code (400, 401, 403, 404, 422, 429, 500).
Sandbox
The sandbox athttps://crypto-sandbox.yativo.com/api uses testnet blockchains — no real funds. Use the environment switcher at the top-right of each API reference page to toggle between Sandbox and Production.
A shared sandbox account is pre-populated for immediate testing:

