Developer Accounts

Andamio uses four credential types. Understanding which you need is the first step to building on the platform.

Credential Types

API Key is required for most requests. User JWT is required for write operations on behalf of a user. Developer JWT is for managing your developer account. Attestation JWT is for third-party identity verification.

Developer Registration

Register a developer account with email and password:

curl -X POST https://preprod.api.andamio.io/api/v2/auth/developer/account/register \
  -H "Content-Type: application/json" \
  -d '{"email": "dev@example.com", "password": "your-password"}'

This creates your developer account and sends a verification email.

Email Verification

A magic link is sent to your email. Click it to verify, or call the endpoint directly:

curl -X POST https://preprod.api.andamio.io/api/v2/auth/developer/verify-email \
  -H "Content-Type: application/json" \
  -d '{"token": "magic-link-token"}'

Email verification is required before you can create or rotate API keys.

Rate limits apply: 5 verification emails per 24 hours, with a 5-minute cooldown between resend requests.

To resend the verification email (requires Developer JWT):

curl -X POST https://preprod.api.andamio.io/api/v2/auth/developer/resend-verification \
  -H "X-API-Key: $API_KEY" \
  -H "Authorization: Bearer $DEV_JWT"

Developer Login

Log in to receive a Developer JWT:

curl -X POST https://preprod.api.andamio.io/api/v2/auth/developer/account/login \
  -H "Content-Type: application/json" \
  -d '{"email": "dev@example.com", "password": "your-password"}'

The Developer JWT is used for account management operations (key creation, rotation, profile access). It is not the same as a User JWT from wallet authentication.

Developer JWT Claims

{
  "iss": "andamio-api",
  "aud": "paid-api",
  "user_id": "uuid",
  "email": "dev@example.com",
  "iat": 1709568000,
  "exp": 1709654400
}

The gateway validates issuer (andamio-api) and audience (paid-api) on every request that requires a Developer JWT.

Wallet Registration

After creating a developer account, link your Cardano wallet for on-chain operations:

# Step 1: Start registration session (requires User JWT from wallet login)
curl -X POST https://preprod.api.andamio.io/api/v2/auth/developer/register/session \
  -H "Authorization: Bearer $USER_JWT"

# Step 2: Complete with wallet signature
curl -X POST https://preprod.api.andamio.io/api/v2/auth/developer/register/complete \
  -H "Authorization: Bearer $USER_JWT" \
  -H "Content-Type: application/json" \
  -d '{"signature": "...", "key": "..."}'

Attestation JWT

The Attestation JWT is a short-lived (approximately 10 minutes) RS256-signed token that proves a user owns an Andamio Access Token. It can be verified offline without calling the API — useful for third-party integrations that need to confirm Andamio identity.

Attestation JWTs are returned by the Access Token Verification flow.

Developer Auth Endpoints

Next Steps

• API Keys — Request, rotate, and manage API keys
• Authentication — Wallet-based user login for end users
• Access Token Verification — Verify identity for third parties