Overview

API for managing Decentraland user credits, tracking user progress through seasons, and handling authentication challenges.

This service integrates with on-chain data through a Squid indexer to track credit consumption and manages credit expiration based on seasonal periods. Users can claim credits by completing goals during active seasons.

Authentication

The API uses two authentication methods:

• Signed Fetch: For user-facing endpoints, requires @dcl/platform-crypto-middleware authentication (ADR-44l). Clients must provide auth chain headers (x-identity, x-signature, x-timestamp) for signature validation.

• Bearer Token: For administrative endpoints, requires API_ADMIN_TOKEN or PROGRAMMATIC_API_ADMIN_TOKEN in the Authorization header.