API Key Authentication
Most API endpoints require an API key passed in the x-api-key header. You can generate API keys from the Camino Treasury dashboard.
GET /v1/yield/artifacts is the one exception — it serves immutable per-period merkle artifacts and is public so anyone can independently verify what’s committed on-chain.
Your API key is only displayed once when it is created. Copy it immediately and store it somewhere secure — you will not be able to view it again.
curl https://api.caminotreasury.com/v1/wallets \
-H "x-api-key: your-api-key"
Key Scoping
Each API key is scoped to a single organization. All data returned by the API is isolated to that organization — you cannot access wallets, bank accounts, or transfers belonging to other organizations.
Error Responses
| Status | Error | Description |
|---|
401 | API key required | No x-api-key header was provided |
401 | Unauthorized | The API key is invalid or has been revoked |
401 | API key expired | The API key has passed its expiration date |