Skip to main content

​
Key types

Read endpoints (/currencies, /pairs, /estimate, /limits, /providers/refund-capability) work without a key at 60 req/min per IP. With a key — 600 req/min per partner.

​
Scopes

A key can be issued with one or more scopes. Default key carries orders:rw. Request additional scopes from the dashboard or via partners@privataswap.com.

​
Rotation

Rotate a key by creating a new one in the dashboard and revoking the old one within the 5-minute dual-sign grace window. During the window both keys work — and so do webhook signatures from both old and new secret if you’re rotating the webhook secret in parallel.

​
Lockout

Five INVALID_KEY responses in 60 seconds from the same IP triggers a 15-minute lockout for that IP. Subscribe to the api_key_locked ops event to know when it happens.

​
Sandbox isolation

Sandbox orders are stored with sandbox=1 in our DB. They never appear in production payout calculations, never hit live providers, and never produce real network transactions. Use ?sandbox_scenario=success|fail|refund|stuck|expire on order creation to deterministically drive the lifecycle.