API key issued at onboarding. Passed as a Bearer token in the Authorization header: Authorization: Bearer <api-key>. Identifies the caller and determines organization scope. Invalid or revoked keys return 401 with error type authentication_error.
Ed25519 or RSA-SHA256 asymmetric signature over the request payload (ADR-0015). Provides request integrity and non-repudiation. The signature covers the HTTP method, path, query string, request body, and timestamp. Invalid signatures return 401 with error type authentication_error.
Unix timestamp (seconds) of when the request was signed. Server rejects requests where the timestamp drifts beyond +/-60 seconds from server time to prevent replay attacks. Must match the timestamp used in the signature computation.
Unique identifier of the account (acc_ prefix). Account resource identifier.
^acc_[A-Za-z0-9]+$"acc_01953e1a5f4b7002"
Unique identifier of the account number (an_ prefix). Account number resource identifier.
^an_[A-Za-z0-9]+$"an_01953e1a5f4b7200"
Account number details.
Writable account number sub-resource. Represents a deposit rail address (ACH routing, wire, IBAN, etc.) attached to an account.
Account number resource identifier.
^an_[A-Za-z0-9]+$"an_01953e1a5f4b7200"
Account resource identifier.
^acc_[A-Za-z0-9]+$"acc_01953e1a5f4b7002"
Type of account number / deposit rail. (MVP constraint: only US account number types are supported with Erebor.)
us_ach, us_fedwire Status of an account number.
active, suspended, closed UTC timestamp in RFC 3339 / ISO 8601 format.
"2026-02-23T12:00:00Z"
ABA routing number (US ACH/wire).
"021000021"
Masked account number (last 4 digits).
^[0-9]{4}$Full IBAN (international bank account number).
"GB29NWBK60161331926819"
SWIFT/BIC code.
"NWBKGB2L"
UK sort code.
"601613"
Name of the bank.
Deprecated. Use Settlement Routes for configurable inbound fund handling. Setting autoConvert creates a single-step settlement route with a convert action.