- CDP SDK
- Documentation
- Features
- Installation
- API Keys
- Usage
- Authentication Tools
- Development
- License
- Support
- Security
Tip
If you're looking to contribute to the SDK, please see the Contributing Guide.
This module contains the Rust CDP SDK, which is a library that provides a client for interacting with the Coinbase Developer Platform (CDP). It includes a CDP Client for interacting with EVM and Solana APIs to create accounts and send transactions, policy APIs to govern transaction permissions, as well as authentication tools for interacting directly with the CDP APIs.
CDP SDK has auto-generated docs for the Rust SDK.
Further documentation is also available on the CDP docs website:
- 🔐 Automatic Authentication: Built-in JWT-based authentication with support for both API keys and wallet secrets
- 🚀 Async/Await Support: Fully async API with Tokio runtime
- 📦 Type-Safe: Generated OpenAPI client with full type safety
- 🌐 Multi-Chain Support: EVM and Solana blockchain support
- 🧪 Trait-Based Architecture: Easy testing and mocking with comprehensive trait interfaces
Add this to your Cargo.toml:
[dependencies]
cdp-sdk = { version = "^0.2.0" }
tokio = { version = "1.0", features = ["full"] }To start, create a CDP API Key. Save the API Key ID and API Key Secret for use in the SDK. You will also need to create a wallet secret in the Portal to sign transactions.
One option is to export your CDP API Key and Wallet Secret as environment variables:
export CDP_API_KEY_ID="YOUR_API_KEY_ID"
export CDP_API_KEY_SECRET="YOUR_API_KEY_SECRET"
export CDP_WALLET_SECRET="YOUR_WALLET_SECRET"Then, initialize the client:
use cdp_sdk::{auth::WalletAuth, Client, CDP_BASE_URL};
use reqwest_middleware::ClientBuilder;
#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
// Initialize the CDP client using environment variables
let wallet_auth = WalletAuth::builder().build()?;
let http_client = ClientBuilder::new(reqwest::Client::new())
.with(wallet_auth)
.build();
let client = Client::new_with_client(CDP_BASE_URL, http_client);
Ok(())
}Another option is to directly pass the API Key and Wallet Secret to the client:
use cdp_sdk::{auth::WalletAuth, Client, CDP_BASE_URL};
use reqwest_middleware::ClientBuilder;
#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
// Initialize with explicit credentials
let wallet_auth = WalletAuth::builder()
.api_key_id("your-api-key-id".to_string())
.api_key_secret("your-api-key-secret".to_string())
.wallet_secret("your-wallet-secret".to_string())
.build()?;
let http_client = ClientBuilder::new(reqwest::Client::new())
.with(wallet_auth)
.build();
let client = Client::new_with_client(CDP_BASE_URL, http_client);
Ok(())
}Create a new EVM account:
use cdp_sdk::types;
// Create a new EVM account with a name
let body = types::CreateEvmAccountBody::builder()
.name(Some("my-evm-account".parse()?));
let response = client
.create_evm_account()
.x_wallet_auth("") // Added by WalletAuth middleware
.x_idempotency_key("unique-request-id")
.body(body)
.send()
.await?;
let account = response.into_inner();
println!("Created account: {:?}", account);// Get an account by its address
let response = client
.get_evm_account()
.address("0x1234567890123456789012345678901234567890")
.send()
.await?;
let account = response.into_inner();
println!("Account: {:?}", account);// Get an account by its name
let response = client
.get_evm_account_by_name()
.name("my-evm-account")
.send()
.await?;
let account = response.into_inner();
println!("Account: {:?}", account);Update an existing EVM account:
use cdp_sdk::types;
// Update an account's name
let update_body = types::UpdateEvmAccountBody::builder()
.name(Some("updated-account-name".parse()?));
let response = client
.update_evm_account()
.address("0x1234567890123456789012345678901234567890")
.body(update_body)
.send()
.await?;
let updated_account = response.into_inner();
println!("Updated account: {:?}", updated_account);List all EVM accounts:
// List all EVM accounts with pagination
let response = client
.list_evm_accounts()
.page_size(10)
.send()
.await?;
let accounts_list = response.into_inner();
println!("Found {} accounts", accounts_list.accounts.len());
for account in accounts_list.accounts {
println!("Account: {} - {:?}", account.address, account.name);
}This SDK also contains simple tools for authenticating REST API requests to the Coinbase Developer Platform (CDP). Choose the method that best suits your needs:
| Method | Difficulty | Description |
|---|---|---|
| Use the CDP Client | Easy | Use the built-in WalletAuth middleware that automatically handles authentication for all requests. |
| Generate a JWT from WalletAuth | Intermediate | Generate a JWT from an existing WalletAuth instance and apply it to your preferred HTTP client. |
| Generate a standalone JWT | Advanced | Generate a JWT token with explicit options, manually create your authentication headers, and apply them to your preferred HTTP client. |
Visit the CDP Authentication docs for more details.
The WalletAuth middleware automatically adds authentication headers to all requests. See the Initialization section above for setup examples.
If you already have a WalletAuth instance, you can generate JWTs directly:
use cdp_sdk::auth::WalletAuth;
let auth = WalletAuth::builder()
.api_key_id("your-api-key-id".to_string())
.api_key_secret("your-api-key-secret".to_string())
.build()?;
let jwt = auth.generate_jwt(
"GET",
"api.cdp.coinbase.com",
"/platform/v2/evm/accounts",
120,
)?;
// Use the JWT in your Authorization header:
// Authorization: Bearer {jwt}For cases where you need a JWT without constructing a WalletAuth instance (e.g., authenticating with the x402 payment facilitator), use the standalone generate_jwt function:
use cdp_sdk::auth::{generate_jwt, JwtOptions};
// For REST API requests
let jwt = generate_jwt(JwtOptions::builder()
.api_key_id("your-api-key-id".to_string())
.api_key_secret("your-api-key-secret".to_string())
.request_method("GET".to_string())
.request_host("api.cdp.coinbase.com".to_string())
.request_path("/platform/v2/evm/accounts".to_string())
.expires_in(120u64)
.build()
)?;
// For websocket connections (omits the uris claim)
let ws_jwt = generate_jwt(JwtOptions::builder()
.api_key_id("your-api-key-id".to_string())
.api_key_secret("your-api-key-secret".to_string())
.build()
)?;Use your JWT (Bearer token) in the Authorization header of your HTTP request:
curl -L 'https://api.cdp.coinbase.com/platform/v2/evm/accounts' \
-H 'Content-Type: application/json' \
-H 'Accept: application/json' \
-H 'Authorization: Bearer $jwt'| Parameter | Required | Description |
|---|---|---|
api_key_id |
Yes | The unique identifier for your API key. Supported formats: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx or organizations/{orgId}/apiKeys/{keyId} |
api_key_secret |
Yes | Your API key secret. Supported formats: Edwards key (Ed25519) as base64, or Elliptic Curve key (ES256) as PEM. |
request_method |
Yes* | The HTTP method (e.g., GET, POST). None for websocket JWTs. |
request_host |
Yes* | The API host (e.g., api.cdp.coinbase.com). None for websocket JWTs. |
request_path |
Yes* | The API path (e.g., /platform/v2/evm/accounts). None for websocket JWTs. |
expires_in |
No | JWT expiration time in seconds. Defaults to 120 (2 minutes). |
audience |
No | Optional audience claim for the JWT. |
* Either all three request parameters (request_method, request_host, request_path) must be provided for REST API requests, or all three must be None for websocket JWTs.
make buildRun all tests (unit + integration):
make testRun unit tests only:
make test-unitRun end-to-end tests:
make test-e2emake lintFix linting issues:
make lint-fixmake formatGenerate documentation:
make docsClean build artifacts:
make cleanGenerate client from OpenAPI spec:
make clientFor a full list of available commands:
make helpThis project is licensed under the MIT License - see the LICENSE file for details.
For feature requests, feedback, or questions, please reach out to us in the #cdp-sdk channel of the Coinbase Developer Platform Discord.
If you discover a security vulnerability within this SDK, please see our Security Policy for disclosure information.