- Authorization for non-custodial accounts: the end customer’s device holds a hardware-backed authorization key and signs every write to their non-custodial account.
- Passkey Strong Customer Authentication (SCA): in the European Economic Area (EEA), end customers confirm some operations, such as transfers, with a passkey. See Strong Customer Authentication.
Server-side and client-side SDKs
The SDKs split along the trust boundary between your backend and the end customer’s device:- Server-side: the Node.js SDK runs on your backend and calls Circle with your API key.
- Client-side: the web, React Native, iOS, and Android SDKs run in your application. They never hold your API key, and your backend makes every API call. The only direct connection to Circle is the Circle-hosted passkey page, which the SDK opens with a frame token.
Choose an SDK
Feature support by SDK
“Through React Native” means that the React Native SDK calls the iOS or Android
SDK for key storage and signing. You don’t call those methods yourself.
Availability
All SDKs use the same environment names:
sandbox and production. The SDKs
follow semantic versioning. Before version 1.0.0, a minor version can include
breaking changes, so pin an exact version.