Capvant

Authentication

One X-API-Key header, created and revoked by your own team, shown once at creation.

Every request is authenticated with an API key sent in the X-API-Key header. Keys are created and revoked by your own team in the Lender Hub under Team to API keys; the full key is shown once at creation.

Shell
X-API-Key: cv_live_4f8a...c21

Key handling

  • Keys start with cv_live_ and are 48 characters long.
  • Store them server-side only. Never ship a key in client-side code or a repository.
  • Create one key per integration (CRM sync, offer engine, reporting) so each can be revoked independently.
  • Revoking a key takes effect immediately.

A missing or invalid key returns 401 with error.code = "unauthorized".

Introduction to the Lender API

What a deal is, what you can do with one, and the two ways to receive deal flow.

Environments

Sandbox and production: one base URL each, and what behaves differently between them.

On this page

Key handling