Authentication

Public catalog, quote, pair, swap and transaction endpoints do not require a JWT or API key.

Optional header x-api-key-partner on POST /v1/swap only:

• omitted → anonymous order

• valid key → order is attributed to the partner (partnerId) and appears in Partner Portal /v1/orders

• invalid key → 401 with error.code INVALID_API_KEY (or the code returned by partner verification)

There is no Bearer/JWT guard on this service.