> For the complete documentation index, see [llms.txt](https://coindisco.gitbook.io/coindisco/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://coindisco.gitbook.io/coindisco/white-label-api/authentication-and-environments.md).

# Authentication and environments

Send the widget public key in the `Partner-Api-Key` header on every White Label API request.

```bash
curl 'https://api.coindisco.com/api/white-label/v1/active-providers/' \
  --header 'Partner-Api-Key: pk_test_YOUR_PUBLIC_KEY'
```

HTTP header names are case-insensitive, but using the documented casing makes examples consistent.

## Environment selection

The key identifies both the partner widget and its environment.

| Prefix     | Environment |
| ---------- | ----------- |
| `pk_test_` | Sandbox     |
| `pk_prod_` | Production  |

Use resource IDs returned with the same key and environment. A provider, asset, network, or region ID from sandbox must not be assumed to have the same availability in production.

## Browser and server usage

The value is a public widget key, not a private API secret. It is expected to appear in widget URLs. For a White Label integration, calling Coindisco through the partner backend is still recommended when the application needs centralized validation, logging, retry control, or protection from request manipulation.

Always use HTTPS and configure the widget's allowed origins in the dashboard.