API Key Management

API keys are cryptographic credentials that authenticate your application when making requests to the Zodia Markets REST and WebSocket APIs. This guide explains how to generate, configure, and secure your API keys.

Understanding API Keys

Key Components

Each API key consists of two parts:

---

Generating API Keys

Step 1: Access API Settings on Zodia Markets Customer Portal

1. Log in to your account on the Zodia Markets Customer Portal
2. Click on your profile icon in the top-right corner
3. Select SETTINGS from the dropdown menu

Step 2: Navigate to API Keys

1. In the Settings page, click the API Keys tab
2. Click Create New API Key

Step 3: Confirm Signed Intent

For customers requiring the highest level of security and non-repudiation, Zodia Markets supports cryptographically signed orders using RSA key pairs. This feature is optional and can be skipped when creating an API key.

See the Signed RSA Key page for full details on providing RSA key pairs on API key registration.

Step 4: Assign Permissions

API keys can be configured with different permission levels:

If both options are toggled off, these are considered to be read only keys.

Step 5: Save Your Credentials

1. Your API Key and API Secret will be displayed
2. Immediately copy and securely store both values
3. Click SAVE

⚠️

Critical: API Secret Is Shown Only Once

The API secret cannot be retrieved after you click SAVE. If you lose it:

1. Click the yellow refresh icon next to the key
2. A new secret will be generated
3. The old secret will be immediately disabled

Update your applications with the new secret to avoid service disruption.

---

Managing Multiple API Keys

You can create multiple API keys to:

• Separate keys for different applications or environments
• Implement different permission levels for different services
• Rotate keys without service disruption
• Isolate security boundaries between systems