# API reference (/docs/api-reference)

Each endpoint page lists its parameters, request body, responses and required permission, with code samples. Use **Try it** with a **test** key and secret to send real requests to your test account. Live keys are refused there.

- Base URL: `https://api.creddot.com`
- Authentication: `x-api-key` plus `x-api-secret` on every request. See [Authentication](/docs/authentication).
- Writes need `x-idempotency-key`. See [Amounts, idempotency and errors](/docs/conventions).

Pick an endpoint from the sidebar, or download the spec: [`openapi.json`](/openapi.json).