StatusSupportGet API keys
Auth flow

Sign in with API key

POST/v1/signin/apikey

Authenticates a user using an API key and returns a JWT access token.

The API key must be sent via the ApiKeyAuth security scheme. The request body carries the userId that the key belongs to. On success the response contains an accessToken with its expiration timestamp.

Authorization

ApiKeyAuth
X-Api-Key<token>

For accessing these endpoints a valid API key must be sent in the X-Api-Key header.

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

Sign in with API key
curl --request POST \  --url 'https://gateway.bit2me.com/v1/signin/apikey' \  --header 'Content-Type: application/json' \  --data '{  "userId": "550e8400-e29b-41d4-a716-446655440000"}'
{  "accessToken": {    "expirationTime": 1727100000,    "token": "header.payload.signature"  }}

Create subaccount POST

Creates a subaccount linked to the authenticated main account. The subaccount receives its own `userId` and can operate independently within the scope granted by the main account.

Authorize Transaction Webhook

Endpoint in your backend used by Bit2Me for request authorization on each transaction. Your backend exposes this endpoint (`POST /v1/b2m/transaction/authorize` on your own domain); Bit2Me calls it.