Documentation Index
Fetch the complete documentation index at: https://docs.bluumfinance.com/llms.txt
Use this file to discover all available pages before exploring further.
All Bluum API requests use HTTP Basic Authentication. Your API Key is the username and your API Secret is the password.
How it works
- Concatenate your API Key and Secret with a colon:
API_KEY:API_SECRET
- Base64-encode the result
- Send it in the
Authorization header as Basic <encoded_value>
curl -X GET 'https://test-service.bluumfinance.com/v1/assets' \
-H 'Authorization: Basic '$(echo -n 'YOUR_API_KEY:YOUR_API_SECRET' | base64)
| Header | Required | Description |
|---|
Authorization | Always | Basic <base64(API_KEY:API_SECRET)> |
Content-Type | POST/PUT | application/json for JSON payloads, multipart/form-data for file uploads |
Idempotency-Key | Deposits/Withdrawals | Unique key to prevent duplicate operations on retry |
Credentials
You receive separate credentials for each environment:
| Environment | Base URL | How to get |
|---|
| Sandbox | https://test-service.bluumfinance.com/v1 | Dashboard → Settings → API Keys |
| Production | https://service.bluumfinance.com/v1 | Issued after compliance approval |
The API Secret is shown only once when created. Store it immediately in a secret manager. If lost, generate a new key pair.
Security best practices
- Store credentials in a secret manager (AWS Secrets Manager, HashiCorp Vault, Doppler) — never in code or config files
- Rotate keys every 90 days
- Scope credential access to service accounts, not individual developers
- Use environment variables to switch between sandbox and production
- Never log or transmit credentials in plaintext
Common authentication errors
| Error Code | Meaning | Resolution |
|---|
BLUM-401-001 | Missing Authorization header | Include Authorization: Basic <credentials> |
BLUM-401-002 | Malformed credentials | Verify Base64 encoding of API_KEY:API_SECRET |
BLUM-401-003 | Invalid API key or secret | Check credentials are correct and not revoked |
BLUM-401-004 | API key inactive | Contact support to activate your key |
