For AI agents: a documentation index is available at /llms.txt. A markdown version of this page is available at /guide/api/endpoints/developer/validate.md.

APIEndpointsDeveloper

Validate developer API authentication

Test endpoint to validate HMAC-SHA256 signature authentication.

POST/api/v1/partner/validate

Test endpoint to validate HMAC-SHA256 signature authentication. Requires X-API-KEY, X-TIMESTAMP, X-NONCE, and X-SIGNATURE headers. See API_auth_Solution.md for full authentication specification.

#Authorizations

X-API-KEYstringrequired

Developer API key (starts with pk_)

Example: pk_1234567890abcdef1234567890abcdef1234567890abcdef1234567890

X-TIMESTAMPintegerrequired

Unix timestamp in seconds (must be within ±5 minutes of server time)

Example: 1704806400

X-NONCEstringrequired

One-time random string (minimum 8 characters, prevents replay attacks)

Example: b7f91c2e5a8d3f1e

X-SIGNATUREstringrequired

HMAC-SHA256 signature of canonical string (hex-encoded)

Example: a1b2c3d4e5f67890abcdef1234567890abcdef1234567890abcdef1234567890

#Request body

Optional JSON request body. Body hash (SHA256) is included in signature canonical string.

teststring

Test field

messagestring

Test message

#Responses

200Authentication successful
401Authentication failed
403Insufficient scope