---
title: "Read client settings"
method: GET
path: "/setup"
tags: ["Clients"]
---

# Read client settings

`GET /setup`

Returns the stored client configuration — webhook URL, whether a webhook secret is set, sponsorship rules, source-token whitelist, price-deviation guard, and app-fee rules — for the authenticated project.

## Headers

- `x-api-key` string — API key for authentication (omit when sending Authorization)
- `authorization` string — Bearer platform token (e.g. forwarded by user-service). Takes precedence over `x-api-key` when both are present.

## Response `200`

Client configuration

- GetSetupResponse
  - `webhookUrl` string
  - `hasWebhookSecret` boolean, required
  - `sponsorship` object
  - `depositWhitelist` object — Per-source-chain deposit allowlist keyed by CAIP-2 chain identifiers, each mapping allowed tokens to optional raw-unit min/max limits.
  - `maxPriceDeviationBps` number, required
  - `minDepositUsd` number
  - `appFees` object
    - `feeBps` integer
    - `tokens` object

## Other responses

- `401` — Authentication required
- `403` — API key lacks required deposits scope

---

[API](https://skmtc.net/rhinestonewtf/apis/deposit-service-api.md) · [All operations](https://skmtc.net/rhinestonewtf/apis/deposit-service-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/rhinestonewtf/deposit-service-api/versions/ce4e0abfe33a/schema)