> ## Documentation Index
> Fetch the complete documentation index at: https://pamm-api.codench.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication and access

> Configure the base URL, bearer credential, request format, and operational time zone.

## Connection details

| Setting             | Value                                                |
| ------------------- | ---------------------------------------------------- |
| Base URL            | `https://pamm-api.example.com`                       |
| CRM Swagger         | `https://pamm-api.example.com/docs/crm`              |
| Authentication      | Bearer CRM API key supplied through a secure channel |
| Media type          | `application/json; charset=utf-8`                    |
| Operating time zone | UTC (`+00:00`)                                       |

## Required headers

```http theme={null}
Authorization: Bearer YOUR_CRM_API_KEY
Accept: application/json
Content-Type: application/json
```

```bash theme={null}
curl "https://pamm-api.example.com/api/v1/master/directory?engine=PAMM&limit=50" \
  -H "Authorization: Bearer YOUR_CRM_API_KEY" \
  -H "Accept: application/json"
```

<Warning>
  Store the CRM API key only in backend secret storage. Do not include it in repositories, screenshots, browser requests, mobile applications, logs, or analytics tools.
</Warning>

Use HTTPS for every environment. If IP allowlisting is enabled, coordinate the CRM's outbound addresses before testing. Do not silently switch credentials when a route returns `403`; confirm that the endpoint belongs to the customer's CRM contract.

## Secret-bearing responses

Account creation and sensitive information routes may return MT5 passwords. Encrypt only the fields your authorized workflow requires and prevent complete response bodies from reaching application logs.

<CardGroup cols={2}>
  <Card title="Previous: Integration model" icon="arrow-left" href="/getting-started/integration-model">
    Return to system ownership and fund separation.
  </Card>

  <Card title="Next: End-to-end workflow" icon="arrow-right" href="/guides/end-to-end">
    Implement the recommended integration sequence.
  </Card>
</CardGroup>