API reference

The Gravv API is a REST API that uses standard HTTP methods and returns JSON responses. All requests go to the base URL:

https://api.gravv.xyz/v1/

Authentication

Gravv generates two key types for each environment:

• Public Key for client-side use
• Secret Key for server-side use

You can find both keys in your Gravv Dashboard.

Every request requires an Api-Key header, which is your Secret Key:

curl -X GET https://api.gravv.xyz/v1/accounts \
  -H "Api-Key: <your-api-key>" \
  -H "x-tenant-id: <your-tenant-id>"

Send all requests over HTTPS. Requests without a valid Api-Key return a 401 Unauthorized response. For more information on obtaining and rotating your keys, see Authentication.

Request headers

The request headers for the Gravv API are as follows:

Header	Description
Api-Key	Your API key for authentication.
x-tenant-id	Your business identifier.
Idempotency-Key	A unique key to prevent duplicate write requests.

Every POST operations requires an Idempotency-Key header to safely retry requests without creating duplicates.

Endpoints

The API reference contains the following endpoint groups:

• Customers

  Create and manage customer profiles.

• Know Your Customer (KYC)

  Verify customer identity and submit KYC documents.

• Features

  Check feature eligibility and activate product features for customers.

• Accounts

  Create and manage internal accounts.

• External accounts

  Add and manage external bank accounts for outgoing transfers.

• Transfers

  Send funds internally and to external accounts.

• Cards

  Issue and manage virtual and physical cards.

• Collections

  Accept payments via card, bank transfer, and mobile money.

• Wallets

  Create and manage crypto wallets for customers.

• Foreign exchange (FX)

  Get exchange rates and execute currency trades.

• Transactions

  Retrieve transaction history for accounts and wallets.

• Webhooks

  View webhook delivery history and event details.