API keys
Base URL https://api.kudivend.com/v1 · How signing works
Authenticator app (TOTP) is required for live API access. Creating, rotating or revoking live keys asks for your PIN and a 6-digit authenticator code.
Live keys
0 of 2 active. Rotate by creating a new key, deploying it, then revoking the old one.
Two live keys can be active at once so you can rotate without downtime. At 2 of 2, revoke the old key before creating or rotating another. Revoking stops a key immediately and needs your PIN and authenticator code.
Sandbox keys
IP allowlist (live)
Live requests from other addresses get 401 ip_not_allowed. Single addresses or CIDR blocks up to /24, up to 20 entries. 0 of 20 used.
No addresses yet: live keys accept calls from anywhere until you add one.
72-hour security freeze. After a PIN reset or a login from a new device, creating, rotating or revoking keys and editing the IP allowlist are locked for 72 hours. Existing keys keep working. Security settings.