Authentication
Every request is authenticated with an API key sent as a bearer token.
Sending the key
Add the header to every HTTP request. MCP clients send it automatically once configured.
Authorization: Bearer tdt_live_…
Key types
Keys are scoped when you create them.
fullscopeRead tools and prepare tools.
readscopeRead tools only. Safe for public bots.
tdt_test_…networkTestnet only (chain 46630).
Rotating keys
Create a new key, update your clients, then revoke the old one. Revoked keys stop working immediately.