API keys & webhooks. Never put secret keys in frontend code.
No keys yet.
Headers: X-Cryptorafts-Signature · X-Cryptorafts-Timestamp · X-Cryptorafts-Event-ID
Use crv_test_ keys. Docs: /verify/developers
curl -X POST /api/v1/sessions \
-H "Authorization: Bearer crv_test_..." \
-H "Content-Type: application/json" \
-d '{"type":"KYC"}'