# /v2/* stops working on legacy API keys

Calls to /v2/* on Coinbase App API stopped working on February 5, 2025.

- API: Coinbase App API (api.coinbase.com)
- Kind: Behaviour change
- Announced: January 22, 2025
- Takes effect: February 5, 2025
- Calls after that day: fail
- Calls it hits: `/v2/*`
- Who it affects: legacy API keys
- Source: [Announcement](https://docs.cdp.coinbase.com/coinbase-app/authentication-authorization/legacy-keys)
- Page: https://www.okapi.bot/providers/coinbase-app-api/breaking-changes/v2-stops-working-on-legacy-api-keys/

## What to use instead

Create a CDP API key on the CDP Portal and authenticate with a JWT bearer token (Authorization: Bearer) instead of the legacy CB-ACCESS-KEY/CB-ACCESS-SIGN HMAC headers.

A new CDP API key must be created on the CDP Portal and the secret replaced in deployment.

## Coinbase App API's words

> In February, 2025, we expired all legacy API keys. Create new CDP API keys and update your code to continue using Coinbase App APIs.