> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rampapay.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Every request carries your key in the X-API-Key header.

Your tenant comes from the key — no request body ever names it.

```bash theme={null}
export BASE="https://api.staging.rampapay.com/v1"
export RAMPA_API_KEY="rpk_..."   # from Rampa, server-side only

curl "$BASE/wallets" -H "X-API-Key: $RAMPA_API_KEY"
```

## Scopes

Each key carries scopes; an endpoint needs its scope or answers `403 SCOPE_REQUIRED`. For this integration ask for:

| Scope | Lets you |
| - | - |
| `accounts:read` | Read your balances across accounts. |
| `wallet:read` | Read your wallet balance, top-up addresses and transactions. |
| `payouts:read` | Read and list payouts. |
| `payouts:write` | Get firm quotes and create payouts. |
| `webhooks:manage` | Register, list, delete and reactivate webhook endpoints. |
| `wallet:write` | Sandbox only: needed for the [faucet](/api-reference/wallet/faucet). Not needed in production for this integration. |

> [!NOTE]
>
> **401 means the key, 403 means the scope.** A missing, unknown, revoked or expired key — or a suspended tenant — all answer the same `401 AUTHENTICATION_FAILED`, on purpose.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.