Admin Dev Auth Token

curl --request POST \
  --url https://api.glider.fi/v1/admin/dev-auth/token \
  --header 'x-api-key: <api-key>'

const options = {method: 'POST', headers: {'x-api-key': '<api-key>'}};

fetch('https://api.glider.fi/v1/admin/dev-auth/token', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.glider.fi/v1/admin/dev-auth/token",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "x-api-key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.glider.fi/v1/admin/dev-auth/token"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("x-api-key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.glider.fi/v1/admin/dev-auth/token")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["x-api-key"] = '<api-key>'

response = http.request(request)
puts response.read_body

POST

admin

dev-auth

token

Admin Dev Auth Token

curl --request POST \
  --url https://api.glider.fi/v1/admin/dev-auth/token \
  --header 'x-api-key: <api-key>'

const options = {method: 'POST', headers: {'x-api-key': '<api-key>'}};

fetch('https://api.glider.fi/v1/admin/dev-auth/token', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.glider.fi/v1/admin/dev-auth/token",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "x-api-key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.glider.fi/v1/admin/dev-auth/token"

	req, _ := http.NewRequest("POST", url, nil)

	req.Header.Add("x-api-key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.glider.fi/v1/admin/dev-auth/token")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["x-api-key"] = '<api-key>'

response = http.request(request)
puts response.read_body

This endpoint mints a short-lived signed dev-auth token for browser development/testing against local or staging platform-api targets.

Scope

Internal-only
Disabled for production use
Protected by ADMIN_AUTH_SECRET_TOKEN

Request

Headers:

Authorization: Bearer <ADMIN_AUTH_SECRET_TOKEN>
Content-Type: application/json

Body:

{
  "primaryWallet": "0x1000000000000000000000000000000000000001",
  "linkedWallets": [
    {
      "address": "11111111111111111111111111111111",
      "chainType": "solana",
      "vm": "solana"
    }
  ],
  "userId": "dev-user-1",
  "vmPreference": "evm",
  "expiresInSeconds": 900,
  "issuer": "webapp-v2-debug"
}

Fields:

primaryWallet: required canonical wallet for the synthetic session
linkedWallets: optional additional linked wallets
userId: optional synthetic user id override
vmPreference: optional preferred VM for wallet routing
expiresInSeconds: optional TTL override
issuer: optional issuer override

Response

{
  "claims": {
    "exp": 1775748004,
    "iat": 1775747104,
    "iss": "webapp-v2-debug",
    "jti": "01KNSCD020RXBWYYCTWF085NMB",
    "linkedWallets": [
      {
        "address": "0x1000000000000000000000000000000000000001",
        "chainId": 8453,
        "chainType": "ethereum",
        "vm": "evm"
      }
    ],
    "primaryWallet": "0x1000000000000000000000000000000000000001",
    "typ": "dev-auth",
    "userId": "dev-user-1",
    "vmPreference": "evm"
  },
  "token": "<signed-token>"
}

Use the returned token as:

x-glider-dev-auth-token: <signed-token>

Runtime Behavior

platform-api treats accepted dev-auth tokens as wallet-backed sessions for:

owner reads
wallet routing
realtime subscription ticket issuance
feature-flag lookups

The token is rejected when:

the runtime is production
DEV_AUTH_TOKEN_SECRET is unset
the token is expired or malformed
the wallet claims are invalid

User Swap Preferences (tRPC)Admin Notifications

B2B API Reference

tRPC Endpoints

Internal Admin Endpoints

Admin Dev Auth Token

Scope

Request

Response

Runtime Behavior

​Scope

​Request

​Response

​Runtime Behavior

Scope

Request

Response

Runtime Behavior