Authentication

API Key

Authenticated API requests accept Authorization: Bearer YOUR_API_KEY. The X-API-Key header is also supported; use one header consistently. Keep credentials in your backend environment, never in browser bundles or public URLs.

curl -X POST https://api.hodle.com.br/api/deposit/asset \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d '{ ... }'

Use a key issued for the correct environment. A sandbox key cannot authorize production requests. See sandbox coverage and the endpoint guide for feature availability; some operations require production approval.

Error Responses

Missing or invalid credentials return an authentication error. Do not retry with a different environment automatically. Check the HTTP status and the endpoint’s response contract before handling the error.