Authentication
All Zet API requests require authentication via an API key sent in the request header.API Key
Include your API key in every request using thex-api-key header:
Key types
Key management
- Contact zetdotmoney@gmail.com to generate or revoke keys
- Each API key is scoped to your organization
- You can have multiple active keys (e.g., one per environment)
- Revoking a key takes effect immediately
API Secret
When you generate an API key, you also receive an API Secret (zet_secret_...). This is used exclusively for webhook signature verification.
The API secret is shown only once when you create the key. If you lose it, revoke the key and create a new one.
Rate Limits
Rate limit information is included in every response:
429 response:
Best practices
- Implement exponential backoff on
429responses - Cache quote responses locally until they expire
- Use webhooks instead of polling for transaction status
- Batch wallet balance checks when possible
