Request signer

Paste your app signing secret and a request, and get the exact signed headers + a ready-to-run curl. It computes the same canonical string + HMAC-SHA512 our API verifies, entirely in your browser — the secret never leaves this page.

Runs entirely in your browser via Web Crypto — your signing secret never leaves this page.

App signing secret (apisign_…)App token (for the example only)MethodPath + query (exactly as sent)

Request body (JSON, signed + sent verbatim)