🔑 API key authentication

Every method under the /api prefix requires authentication. The key is passed in the Authorization header:

Authorization: Bearer <API_TOKEN>
Accept: application/json

The Accept: application/json header is recommended: it guarantees that validation and authorisation errors are returned as JSON rather than an HTML page.

🆕 Where to get a key

1. Sign in to your dashboard at amlkyc.tech.
2. Open the API section of your profile.
3. Click "Create token" and copy the value — it is shown only once.

The key does not expire until you revoke it. Keep it server-side: it grants access to the balance and the checks of your account.

Example request

curl 'https://amlkyc.tech/api/user/balance' \
  -H 'Authorization: Bearer <API_TOKEN>' \
  -H 'Accept: application/json'

🔁 Authentication errors

A 403 for a restricted key looks like this:

{
  "success": false,
  "message": "This API key is not allowed to use this endpoint.",
  "code": "token_scope_missing"
}