Skip to main content

​
Getting a permission group

Contact your organization admin to create and configure the correct permission group needed for your API key.

​
Understanding which API permissions you need

Each API requires a specific permission tied to the permission group and respective API key.
API permissions by endpoint

​
Permission levels

When creating a permission group, you will make several choices that determine what APIs can be called using the API keys associated with this permission group. There are two levels of vault permissions:
  • Permissions set at the organization level — global permissions — apply to all vaults.
  • Permissions that only apply to the vaults selected.

​
Global permissions

These permissions sit across all of your vaults, not just a single vault. If you have global Withdrawal permissions on your API key, that key could initiate a withdrawal operation (still requires quorum approval) from any of your vaults.

​
Vault-level permissions

These permissions are specific to a single vault. If you have vault-level Internal Transfer permissions on your API key, that key could initiate a transfer operation only from that source vault (or wallets within that vault).

​
All-vaults

This will enable all current vaults and any future vaults to inherit this permission. Even if the vault changes names or is under a different account, any key will inherit this permission set.
CategoryPermissionDescriptionUse case
GlobalInitiate withdrawalsInitiate withdrawals to external destinations. All withdrawals require quorum approval through the Anchorage Digital mobile app.
GlobalRead sub-accountsView read-only information for ledger subaccounts.Wealth Management & ETF only
GlobalWrite sub-accountsWrite to ledger to manage ledger subaccounts.Wealth Management & ETF only
GlobalExecute tradesAll trade clients: Execute RFQs. Wealth Management only: Orders, Websocket and FIX trading.Trading clients only. Requires user to be an Authorized Trader.
GlobalRead tradesRead all trades placed across trading accounts tied to your org.
GlobalRead deposit attributionRead all pending and completed deposit attributions.
GlobalDeposit attributionAttribute deposits as known deposits or spam.
GlobalConfigure webhooksConfigure and manage webhooks via REST API.
GlobalOnboardingOnboard and manage wealth management end clients.Wealth Management only
GlobalInitiate staking and unstakingInitiate staking and unstaking operations from wallets.
GlobalManage trusted destinationsCreate and manage trusted destinations.
GlobalManage collateral packagesRead collateral management package information.Collateral Management only
GlobalRead statementsRead statements.Wealth Management only
Vault-levelReadRead balances and transactions for the specific wallets within this vault.
Vault-levelCreate addressCreate wallets and addresses within a vault.
Vault-levelTransfer funds — within Anchorage DigitalTransfer funds from that source vault.
Vault-levelTransfer funds — outside of Anchorage DigitalTransfer funds from that source vault.
Vault-levelAuthorize settlementsAuthorize Atlas settlement from that source vault.Atlas clients only
Vault-levelPropose and accept settlementsPropose and accept Atlas settlement from that source vault.Atlas clients only