Guides · payments · Popular APIs

Coinbase Developer Platform (CDP)

Coinbase Developer Platform portal, projects and API keys for wallets, Onramp/Offramp, node/RPC and custodial APIs. Non-custodial APIs work right after sign-up; custodial APIs need a verified Coinbase Business or Prime account linked to CDP; full Onramp access needs a developer onboarding form.

Researched · not yet run liveLast researched 25 October 2026 · Coinbase · provider site

Researched, not yet run live. Built from the provider’s official pages (linked below). A person hasn’t walked this flow end to end yet, so check each step against the source.

Who owns what

A CDP account (Coinbase login) holds one or more projects; API keys, client keys, wallet secrets and Onramp settings are per project. Custodial APIs additionally need a verified Coinbase Business or Prime account linked to CDP.

  • CDP account developer owned by the personEmail verification and 2FA are required.
  • CDP project project · under CDP account
  • Coinbase Business or Prime account organisationoptional owned by the companyOnly for custodial APIs (transfers, trading, payment acceptance, reporting); linked by a CDP Admin.

Have ready

  • Not located in, or doing business with, a comprehensively sanctioned jurisdiction: See terms_notes.
  • A phone or authenticator app for two-factor authentication on the CDP account. [4]Needed for: Create a CDP account
  • Incorporation documents, beneficial-owner details and proof of address (custodial APIs only). · Business verification through Coinbase Business or Prime asks for them. [3]Needed for: Verify a business account (custodial APIs only)
  • Production domain(s) for Onramp redirect URLs. · Production redirect URLs must be on the project's domain allowlist. [4]Needed for: Add production domains to the Onramp allowlist

Steps

Steps marked “human step” are ones only you can do: verapli never signs in, submits, pays or accepts terms for you.

  1. Create a CDP account

    The person signs up for the CDP portal, verifies their email and sets up two-factor authentication.

    • Guided by hand
    • Human step: You enter a 2-step code

    Where: https://portal.cdp.coinbase.com

  2. Create a Secret API Key

    In API Keys > Secret API Keys, select the project, click Create API key, name it, optionally set an IP allowlist, permissions and Ed25519 signature algorithm, then save the key id and secret. The secret is not shown again; regenerate by deleting and recreating.

    • verapli co-pilot
    • Human step: You press submit
    • After: Create a CDP account

    verapli captures CDP_API_KEY_SECRET here by plain code: encrypted in your browser, never shown to AI.

    Where: https://portal.cdp.coinbase.com/api-keys/secret

  3. Copy the Client API Keyoptional

    In API Keys > Client API Key, copy the project's client key (safe for client-side RPC use; limited by design). Rotate to replace it.

    • verapli co-pilot
    • After: Create a CDP account

    verapli captures CDP_CLIENT_API_KEY here by plain code: encrypted in your browser, never shown to AI.

    Where: https://portal.cdp.coinbase.com/api-keys/secret

  4. Generate a Wallet Secret (wallets only)optional

    In Non-custodial Wallet > Security, click Generate. Save it immediately; it cannot be viewed again. Needed with the Secret API Key for signing and other sensitive wallet writes.

    • verapli co-pilot
    • Human step: You press submit
    • After: Create a CDP account

    verapli captures CDP_WALLET_SECRET here by plain code: encrypted in your browser, never shown to AI.

    Where: https://portal.cdp.coinbase.com/wallets/non-custodial/security

  5. Complete Onramp developer onboarding (Onramp only)optional

    Submit the Onramp onboarding form to lift trial-mode limits; Headless Onramp (US-only) starts after the app is approved.

    • Guided by hand
    • Human step: The provider reviews it
    • After: Create a CDP account
  6. Add production domains to the Onramp allowlistoptional

    Add production redirect URLs to the project's domain allowlist.

    • Guided by hand
    • After: Create a CDP account
  7. Verify a business account (custodial APIs only)optional

    Apply for Coinbase Business (coinbase.com/business) or Prime and complete KYB/KYC with company documents, beneficial owners and proof of address. The person uploads documents directly to Coinbase.

    • Guided by hand
    • Human step: You prove your identity
    • After: Create a CDP account

Terms and gotchas

Plain-English summary, not legal advice. Each card links its source.

Can get you bannedThe rules say

Sanctioned jurisdictions

Developers may not use CDP tools in violation of sanctions, nor be located in or do business with people in comprehensively sanctioned jurisdictions (Iran, Cuba, North Korea, Syria, and the Crimea, Donetsk and Luhansk regions of Ukraine). [6]

Can cost moneyThe rules say

New York virtual currency business

CDP tools may not be used for virtual currency business involving New York residents unless it complies with New York Department of Financial Services rules. [6]

Can cost moneyThe rules say

Custodial APIs need KYB

Transfers, trading, payment acceptance and reporting APIs require a verified Coinbase Business or Prime account linked to CDP; non-custodial APIs do not. [2]

Worth knowingThe rules say

Headless Onramp limits

Headless Onramp is US-only, requires app approval and caps card purchases at up to $2.5K weekly. [5]

What you end up with

Env varSecretFormatWhat it is
CDP_API_KEY_IDnot secretuuid-like identifierId of the Secret API Key (shown with the secret at creation).
CDP_API_KEY_SECRETsecretbase64 Ed25519 private key (shape only)Secret API Key private key (server side only; used to sign request JWTs).
CDP_CLIENT_API_KEYnot secretopaque key stringClient API Key for client-side RPC use.
CDP_WALLET_SECRETsecretopaque secret (shape only)Wallet Secret required for sensitive wallet write operations.

Pricing

  • Coinbase-hosted Onramp has no developer fees. Pricing for other CDP products was not captured (the pricing page refused automated access) [to verify].

Source [5]

For agents

The same entry as JSON: /api/v1/entries/coinbase/developer-platform · requirements /api/v1/requirements/coinbase/developer-platform · terms /api/v1/terms/coinbase/developer-platform.

Remote MCP (read-only, no auth)
claude mcp add --transport http verapli https://verapli.com/mcp

> "What do I need for Coinbase Developer Platform (CDP), and how long will it take?"
  → tools/call requirements { "provider_id": "coinbase/developer-platform" }

Sources

  1. CDP API Keys Client API Key (client-side, RPC URL, rotate) vs Secret API Key (server-side; create with optional IP allowlist, permissions and signature algorithm, Ed25519 recommended; save key id and secret; key file download optional; regenerate by delete and recreate); Wallet Secret generated in the non-custodial wallet security page, shown once, required for sensitive wallet writes. · accessed 25 October 2026 · official
  2. Welcome to CDP API Non-custodial APIs (wallets, Onramp) available immediately after sign-up; custodial APIs require a verified business account linked to CDP; Beta endpoints may change; one API key for all CDP services. · accessed 25 October 2026 · official
  3. Initial Setup Business verification via Coinbase Business or Prime (incorporation documents, beneficial owners, proof of address); linking requires CDP Admin role; Accounts > Link account; switch Sandbox to Live and create Live keys; Sandbox and Live keys not interchangeable. (Read via search snippet of the official page [to verify on page].) · accessed 25 October 2026 · official
  4. Onramp Quickstart CDP account with email verification and 2FA; Secret API Key required (Client API Keys do not work with Onramp/Offramp REST APIs); session tokens single-use, expire after 5 minutes; production redirect URLs must be on the domain allowlist. · accessed 25 October 2026 · official
  5. Onramp overview Onboarding form required for full access beyond trial limits; Headless Onramp US-only, starts after app approval, card purchases up to $2.5K weekly; Coinbase-hosted Onramp has no developer fees; Guest Checkout being discontinued June 30, 2026. · accessed 25 October 2026 · official
  6. Coinbase Developer Platform Terms of Service No use in violation of sanctions; no developers located in or doing business with comprehensively sanctioned jurisdictions (Iran, Cuba, North Korea, Syria, Crimea, Donetsk, Luhansk); restrictions on virtual currency business with New York residents unless compliant with NYDFS rules. (Page returned 403 to automated fetch; read via search snippet [to verify on page].) · accessed 25 October 2026 · official

Provider rules change. This page is generated from verapli registry version 2026.1025.316; spotted something out of date? Tell us. Coinbase is not affiliated with verapli.