Base URL
All API requests should be made to:Prerequisites
Before using Express API, you’ll need to:1
Create a Magic Account
Visit the Magic Dashboard and sign up for a Magic developer account.
2
Create an Application
In your dashboard, create a new application and obtain your API keys. Use the
Publishable API Key
for calls from the frontend and the Secret Key
for calls from the backend.3
Configure an Identity Provider
Configure an identity provider (like Auth0, Firebase Auth, or NextAuth) for user authentication and get your Magic provider ID.
4
Configure Allowlisting
In the Magic dashboard, go to Settings → Allowed Origins & Redirects to configure domain allowlisting for your application.
Authentication
Express API requires multiple authentication headers for secure access:Bearer token (JWT) for user authentication. Format:
Bearer YOUR_JWT_TOKEN
Your Magic API key for service authentication.
Alternative to API key - your Magic secret key for service authentication.
The OIDC provider ID for your application.
You must provide either
X-Magic-API-Key
or X-Magic-Secret-Key
along with the other required headers.The JWT token should contain user identification information that Magic can use to associate wallets with specific users. Ensure your OIDC provider is configured to include necessary user claims.