{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"entry_sha256":"c0e50f38c264d9216c6af49f3bdd120a752d08e35066441e72b9b8305bf7fc9d","entry":{"id":"coinbase/developer-platform","name":"Coinbase Developer Platform (CDP)","vendor":"Coinbase","summary":"Coinbase Developer Platform portal, projects and API keys for wallets, Onramp/Offramp, node/RPC and custodial APIs. Non-custodial APIs work right after sign-up; custodial APIs need a verified Coinbase Business or Prime account linked to CDP; full Onramp access needs a developer onboarding form.","aliases":["cdp"],"category":"payments","group":"C","homepage":"https://www.coinbase.com/developer-platform","docs":["https://docs.cdp.coinbase.com","https://docs.cdp.coinbase.com/get-started/docs/cdp-api-keys","https://docs.cdp.coinbase.com/get-started/initial-setup"],"status":"researched","last_verified":null,"last_researched":"2026-10-25","sources":[{"id":"api_keys","url":"https://docs.cdp.coinbase.com/get-started/docs/cdp-api-keys","title":"CDP API Keys","accessed":"2026-10-25","supports":"Client API Key (client-side, RPC URL, rotate) vs Secret API Key (server-side; create with optional IP allowlist, permissions and signature algorithm, Ed25519 recommended; save key id and secret; key file download optional; regenerate by delete and recreate); Wallet Secret generated in the non-custodial wallet security page, shown once, required for sensitive wallet writes.","kind":"official"},{"id":"api_intro","url":"https://docs.cdp.coinbase.com/api-reference/v2/introduction","title":"Welcome to CDP API","accessed":"2026-10-25","supports":"Non-custodial APIs (wallets, Onramp) available immediately after sign-up; custodial APIs require a verified business account linked to CDP; Beta endpoints may change; one API key for all CDP services.","kind":"official"},{"id":"initial_setup","url":"https://docs.cdp.coinbase.com/get-started/initial-setup","title":"Initial Setup","accessed":"2026-10-25","supports":"Business verification via Coinbase Business or Prime (incorporation documents, beneficial owners, proof of address); linking requires CDP Admin role; Accounts > Link account; switch Sandbox to Live and create Live keys; Sandbox and Live keys not interchangeable. (Read via search snippet of the official page [to verify on page].)","kind":"official"},{"id":"onramp_quickstart","url":"https://docs.cdp.coinbase.com/onramp/introduction/quickstart","title":"Onramp Quickstart","accessed":"2026-10-25","supports":"CDP account with email verification and 2FA; Secret API Key required (Client API Keys do not work with Onramp/Offramp REST APIs); session tokens single-use, expire after 5 minutes; production redirect URLs must be on the domain allowlist.","kind":"official"},{"id":"onramp_overview","url":"https://docs.cdp.coinbase.com/onramp/onramp-overview","title":"Onramp overview","accessed":"2026-10-25","supports":"Onboarding form required for full access beyond trial limits; Headless Onramp US-only, starts after app approval, card purchases up to $2.5K weekly; Coinbase-hosted Onramp has no developer fees; Guest Checkout being discontinued June 30, 2026.","kind":"official"},{"id":"cdp_terms","url":"https://www.coinbase.com/legal/developer-platform/terms-of-service","title":"Coinbase Developer Platform Terms of Service","accessed":"2026-10-25","supports":"No use in violation of sanctions; no developers located in or doing business with comprehensively sanctioned jurisdictions (Iran, Cuba, North Korea, Syria, Crimea, Donetsk, Luhansk); restrictions on virtual currency business with New York residents unless compliant with NYDFS rules. (Page returned 403 to automated fetch; read via search snippet [to verify on page].)","kind":"official"}],"allowed_domains":["portal.cdp.coinbase.com"],"account_model":{"summary":"A CDP account (Coinbase login) holds one or more projects; API keys, client keys, wallet secrets and Onramp settings are per project. Custodial APIs additionally need a verified Coinbase Business or Prime account linked to CDP.","accounts":[{"name":"CDP account","kind":"developer","owned_by":"the person","required":true,"note":"Email verification and 2FA are required."},{"name":"CDP project","kind":"project","parent":"CDP account","required":true},{"name":"Coinbase Business or Prime account","kind":"organisation","owned_by":"the company","required":false,"note":"Only for custodial APIs (transfers, trading, payment acceptance, reporting); linked by a CDP Admin."}]},"prerequisites":[{"need":"Not located in, or doing business with, a comprehensively sanctioned jurisdiction","note":"See terms_notes."}],"have_ready":[{"kind":"phone_for_2fa","description":"A phone or authenticator app for two-factor authentication on the CDP account.","needed_for":["create_account"],"auto_check":"none","source":"onramp_quickstart"},{"kind":"company_documents","description":"Incorporation documents, beneficial-owner details and proof of address (custodial APIs only).","why":"Business verification through Coinbase Business or Prime asks for them.","needed_for":["business_verification"],"auto_check":"none","source":"initial_setup"},{"kind":"live_website","description":"Production domain(s) for Onramp redirect URLs.","why":"Production redirect URLs must be on the project's domain allowlist.","needed_for":["onramp_domain_allowlist"],"auto_check":"website_live","source":"onramp_quickstart"}],"steps":[{"id":"create_account","title":"Create a CDP account","summary":"The person signs up for the CDP portal, verifies their email and sets up two-factor authentication.","route":"guided","depends_on":[],"gate":"2fa","url":"https://portal.cdp.coinbase.com","preflight":["mfa_enabled"],"sources":["onramp_quickstart"]},{"id":"secret_api_key","title":"Create a Secret API Key","summary":"In API Keys > Secret API Keys, select the project, click Create API key, name it, optionally set an IP allowlist, permissions and Ed25519 signature algorithm, then save the key id and secret. The secret is not shown again; regenerate by deleting and recreating.","route":"copilot","depends_on":["create_account"],"gate":"human_submit","url":"https://portal.cdp.coinbase.com/api-keys/secret","capture":{"env":"CDP_API_KEY_SECRET","kind":"secret"},"sources":["api_keys"]},{"id":"client_api_key","title":"Copy the Client API Key","summary":"In API Keys > Client API Key, copy the project's client key (safe for client-side RPC use; limited by design). Rotate to replace it.","route":"copilot","depends_on":["create_account"],"gate":"none","url":"https://portal.cdp.coinbase.com/api-keys/secret","capture":{"env":"CDP_CLIENT_API_KEY","kind":"api_key"},"optional":true,"sources":["api_keys"]},{"id":"wallet_secret","title":"Generate a Wallet Secret (wallets only)","summary":"In Non-custodial Wallet > Security, click Generate. Save it immediately; it cannot be viewed again. Needed with the Secret API Key for signing and other sensitive wallet writes.","route":"copilot","depends_on":["create_account"],"gate":"human_submit","url":"https://portal.cdp.coinbase.com/wallets/non-custodial/security","capture":{"env":"CDP_WALLET_SECRET","kind":"secret"},"optional":true,"sources":["api_keys"]},{"id":"onramp_onboarding","title":"Complete Onramp developer onboarding (Onramp only)","summary":"Submit the Onramp onboarding form to lift trial-mode limits; Headless Onramp (US-only) starts after the app is approved.","route":"guided","depends_on":["create_account"],"gate":"third_party_review","optional":true,"sources":["onramp_overview"]},{"id":"onramp_domain_allowlist","title":"Add production domains to the Onramp allowlist","summary":"Add production redirect URLs to the project's domain allowlist.","route":"guided","depends_on":["create_account"],"gate":"none","optional":true,"sources":["onramp_quickstart"]},{"id":"business_verification","title":"Verify a business account (custodial APIs only)","summary":"Apply for Coinbase Business (coinbase.com/business) or Prime and complete KYB/KYC with company documents, beneficial owners and proof of address. The person uploads documents directly to Coinbase.","route":"guided","depends_on":["create_account"],"gate":"human_identity","optional":true,"sources":["initial_setup"]},{"id":"link_business_account","title":"Link the verified account and go live","summary":"As CDP Admin, go to Accounts > Link account and choose the Business or Prime accounts; then switch the portal from Sandbox to Live and create Live API keys (Sandbox and Live keys are not interchangeable).","route":"guided","depends_on":["business_verification"],"gate":"human_submit","optional":true,"sources":["initial_setup"]}],"outputs":[{"name":"CDP_API_KEY_ID","description":"Id of the Secret API Key (shown with the secret at creation).","secret":false,"example_format":"uuid-like identifier","from_step":"secret_api_key"},{"name":"CDP_API_KEY_SECRET","description":"Secret API Key private key (server side only; used to sign request JWTs).","secret":true,"example_format":"base64 Ed25519 private key (shape only)","from_step":"secret_api_key"},{"name":"CDP_CLIENT_API_KEY","description":"Client API Key for client-side RPC use.","secret":false,"example_format":"opaque key string","from_step":"client_api_key"},{"name":"CDP_WALLET_SECRET","description":"Wallet Secret required for sensitive wallet write operations.","secret":true,"example_format":"opaque secret (shape only)","from_step":"wallet_secret"}],"terms_notes":[{"kind":"rules_say","severity":"red","title":"Sanctioned jurisdictions","text":"Developers may not use CDP tools in violation of sanctions, nor be located in or do business with people in comprehensively sanctioned jurisdictions (Iran, Cuba, North Korea, Syria, and the Crimea, Donetsk and Luhansk regions of Ukraine).","source":"cdp_terms"},{"kind":"rules_say","severity":"amber","title":"New York virtual currency business","text":"CDP tools may not be used for virtual currency business involving New York residents unless it complies with New York Department of Financial Services rules.","source":"cdp_terms"},{"kind":"rules_say","severity":"amber","title":"Custodial APIs need KYB","text":"Transfers, trading, payment acceptance and reporting APIs require a verified Coinbase Business or Prime account linked to CDP; non-custodial APIs do not.","source":"api_intro"},{"kind":"rules_say","severity":"yellow","title":"Headless Onramp limits","text":"Headless Onramp is US-only, requires app approval and caps card purchases at up to $2.5K weekly.","source":"onramp_overview"}],"pricing_notes":{"notes":"Coinbase-hosted Onramp has no developer fees. Pricing for other CDP products was not captured (the pricing page refused automated access) [to verify].","source":"onramp_overview"},"stripe_projects":false,"api_provisioning":{"available":"no","notes":"Accounts, projects, API keys and wallet secrets are created in the CDP portal; no API to create the first key.","source":"api_keys"},"notes":["Business verification lead time is not stated in the docs.","Initial Setup and Terms pages were read through search snippets; confirm on page [to verify]."]}}