Request signature
The Now and Signature fields are sent in the body of every request, not in HTTP headers — the key difference from Callisto.
Formula, rev. 2026.05.01
Signature = LOWERCASE(HMACSHA256(SecretKey, SubscriptionProjectID + Now))- The HMAC key is
SecretKey; the message is the concatenation ofSubscriptionProjectIDandNowwith no separator. - The result is 64 lowercase hex characters.
Nowis UTC time inyyyyMMddHHmmssformat; the allowed drift is ±20 minutes.
The formula above is signature version 2. The platform assigns the version to each project; version 1 — MD5(SubscriptionProjectID + Now + PartnerPassword) — is legacy. The sandbox implements version 2 only.
Signature calculation
Sandbox
curl
PROJECT_ID=2001
SECRET=subs_secret_key
NOW=$(date -u +%Y%m%d%H%M%S)
SIG=$(printf '%s%s' "$PROJECT_ID" "$NOW" \
| openssl dgst -sha256 -hmac "$SECRET" | awk '{print $NF}')