Authentication

The Liquidity API requires two authentication layers for secure access:

A valid API key must be included in the Authorization header:

Authorization: Bearer lk_sandbox_xxx...

Test keys: lk_sandbox_

Live keys: lk_live_

HTTPS is mandatory

API keys must remain confidential

Required for specific endpoints (e.g., Create Client, Create Credit)

The raw request body must be signed with an RSA-4096 private key

The Base64-encoded signature must be added to the X-Signature header:

X-Signature: <base64-encoded-signature>

The signature must match the exact body content

Only RSA-4096 is supported

Public keys (PEM format) must be shared with the account manager securely

See the [RSA-4096 Implementation Guide] for:

Key pair generation

Request signing & verification

Error handling and best practices