Sandbox access and test API keys

​

Bastion sandbox

• Test API integrations: Validate your application’s interaction with Bastion’s APIs in a risk-free setting.
• Explore features: Discover and understand the capabilities of our platform, from managing accounts and identities to stablecoin transfers and webhooks.
• Build a POC: Quickly develop and validate proof-of-concept integrations using realistic test data, allowing for efficient building and debugging.

• Account management: Create, list, and retrieve accounts, and check account balances.
• Identity services: Manage individual and business identities, including compliance data submission (KYB/KYC) and payment instruction creation.
• Stablecoin transfers: Initiate and track stablecoin transfers.
• Transaction signing (coming soon): Test signing raw transactions and data.
• Webhooks: Configure and test webhooks for real-time event notifications.

​

Access sandbox

​

Sandbox dashboard

​

Sandbox APIs

application/json

​

Create a sandbox API key

1. Head to the API keys tab on the left, and select Create new API Key.
2. A small pop-up window appears, prompting for an API key name.

3. Once an API key name is provided, select Create new API key. A secret test API key is displayed for you to save. Make sure to store this test secret key. It is not retrievable afterward.

​

Pass the sandbox API key in request headers

1. Set the Authorization header in your HTTP requests.
2. Use the Bearer scheme followed by a space and the API key. The header should look like this:
   Authorization: Bearer <your-api-key>
   
3. Replace <your-api-key> with the actual API key provided to you and add it to the request. For example, if you are using cURL to make a request to our API, you can include the Authorization header as follows:

curl -H "Authorization: Bearer <your-api-key>" https://api.sandbox.bastion.io/v2/accounts

​

Stablecoin transfer API call example

curl -X POST \
  https://api.sandbox.bastion.io/v2/stablecoins/transfers \
  -H "Authorization: Bearer <your-api-key>" \
  -H "Content-Type: application/json" \
  -d '{
    "request_id": "a1b2c3d4-e5f6-7890-1234-567890abcdef",
    "amount": "100.00",
    "on_behalf_of": "your_account_id",
    "payment_purpose": "PERSONAL_REMITTANCE",
    "source": {
      "currency": "USDC",
      "payment_rail": "ETHEREUM_SEPOLIA"
    },
    "destination": {
      "currency": "USDC",
      "payment_rail": "ETHEREUM_SEPOLIA"
    }
  }'

​

Conclusion