Skip to main content

​
Base URLs

Meridian provides your Sandbox environment during onboarding. Validate your integration there before using production.

​
Authentication

The Meridian Accounts API supports two authentication layers:
  • Partner HMAC authentication when your backend proves partner identity with X-Meridian-* headers and an HMAC SHA-256 signature
  • JWT bearer authentication when your client or backend sends Authorization: Bearer {token} after a token has already been minted for a user
In a typical integration, your backend uses partner HMAC authentication to call POST /v1/auth/token, then later user-scoped requests use the returned JWT. For the conceptual auth guides, see: