Authentication
The NowRamp Onramp API is designed for simplicity — most endpoints are public and don’t require an API key.
Onramp API (Public)
All Onramp API endpoints (/public/v1/onramp/*) are public. Pass your projectId as a query parameter or in the request body:
// No API key needed
const quotes = await fetch(
'https://api.nowramp.com/public/v1/onramp/quotes?projectId=your_project_id&fiatCurrency=USD&cryptoCurrency=ETH&network=ethereum&fiatAmount=100'
).then(r => r.json());
Optional: Public Key for Higher Rate Limits
By default, public endpoints are rate-limited to 60 requests per minute. To increase this to 1000 requests per minute, include a public key (pk_) in the X-API-Key header:
curl "https://api.nowramp.com/public/v1/onramp/quotes?projectId=YOUR_PROJECT_ID&fiatCurrency=USD&cryptoCurrency=ETH&network=ethereum&fiatAmount=100" \
-H "X-API-Key: pk_live_your_public_key"
pk_) are safe to use in frontend code.
API Key Types
| Key Prefix | Type | Usage |
|---|
pk_live_ | Public Key (Live) | Frontend — optional, for higher rate limits |
pk_test_ | Public Key (Test) | Frontend — sandbox environment |
sk_live_ | Secret Key (Live) | Backend only — partner dashboard operations |
sk_test_ | Secret Key (Test) | Backend only — sandbox |
Secret keys (sk_) must never be exposed in client-side code. They are only needed for partner dashboard operations (webhook management, API key rotation, etc.), not for the Onramp API.
Getting Your Keys
- Log in to your Partner Dashboard
- Navigate to Settings > API Keys
- Copy your project ID and public key
See the Partner Dashboard guide for more details.
Environments
| Environment | Key Prefix | API URL |
|---|
| Production | pk_live_ / sk_live_ | https://api.nowramp.com |
| Sandbox | pk_test_ / sk_test_ | https://api.sandbox.nowramp.com |
Security Best Practices
Store Keys in Environment Variables
# .env (never commit this file)
NEXT_PUBLIC_NOWRAMP_PROJECT_ID=your_project_id
NEXT_PUBLIC_NOWRAMP_PUBLIC_KEY=pk_live_abc123xyz789
const api = new RampApi({
projectId: process.env.NEXT_PUBLIC_NOWRAMP_PROJECT_ID,
apiKey: process.env.NEXT_PUBLIC_NOWRAMP_PUBLIC_KEY // Optional
});
Key Rotation
Rotate your API keys periodically via the Partner Dashboard:
- Go to Settings > API Keys
- Click Roll next to the key
- Update your application configuration
- The old key remains valid for 24 hours (grace period)
Error Codes
| Error Code | HTTP Status | Description |
|---|
INVALID_API_KEY | 401 | API key is invalid or revoked |
RATE_LIMIT_EXCEEDED | 429 | Too many requests — add a pk_ key or implement backoff |
Next Steps
