API reference
Every endpoint, parameter and schema, generated from the OpenAPI document.
These pages are generated from the OpenAPI 3.1 document.
| Server | URL |
|---|---|
| Sandbox | https://stagingvault.megtrust.com |
| Production | https://vault.megtrust.com |
Every path starts with /api/v1/.
No “try it” console on these pages.
Every request needs a fresh Ed25519 signature, and a private key must never enter a browser. Call the API from your server with a signing client — see Sign a request.
Authentication
The OpenAPI document declares three headers — x-api-key-id, x-api-timestamp and x-api-signature
— but a static value in them is not enough: the signature covers the timestamp, method, exact path and
query, body hash and idempotency key of each request. Code generated from the document still needs the
signing step.
Each operation also accepts _request_id, a fresh random UUID per attempt that keeps identical
requests in the same second distinct. The supplied clients add it for you.
Import it
Import the document into Postman or your code generator, then set the server to your environment.