Authentication Method
OAuth 2.0 Bearer Token
Access Token is automatically obtained after SDK login; all API requests must include this Token
curl -X GET "https://api.microcosm.money/v1/mcc/balance" \ -H "Authorization: Bearer <access_token>"
SDK Auto-Handled
SDK has built-in Token management: auto-store, auto-refresh, re-login on expiry
// SDK auto-injects Authorization Header
import { useMCC, useMCCPrice } from '@microcosmmoney/auth-react'
const { balance, loading } = useMCC()
const { data: price } = useMCCPrice()Project API Key
For project server-side write operations, use X-API-Key and X-Project-ID headers
curl -X POST "https://api.microcosm.money/v1/mining/submit-activity" \ -H "X-API-Key: <api_secret>" \ -H "X-Project-ID: <project_id>"
HMAC Signature
For high-security projects, sign requests with HMAC-SHA256. Time window ±300s
curl -X POST "https://api.microcosm.money/v1/funds/lock" \ -H "X-Project-ID: <project_id>" \ -H "X-Timestamp: <unix_timestamp>" \ -H "X-Signature: sha256=<hmac_hash>"