API Keys

API keys authenticate your application with the NERO MPC Auth backend. Every SDK request includes the key in the X-API-Key header.

Generate a Key

1. Navigate to your project → API Keys
2. Click Create Key
3. Enter a name (e.g., "Production backend")
4. Copy the generated key immediately

The key format is nero_sk_<random> and is shown only once. If you lose it, generate a new one and revoke the old one.

Keys are stored as HMAC-SHA256 hashes — the plaintext key is never stored on the server.

Key Scopes

All keys are created with default scopes:

Using the Key

Pass the API key in your SDK configuration:

const sdk = new NeroMpcSDK({
  backendUrl: "https://mpc-auth.nerochain.io",
  apiKey: "nero_sk_your_key_here",
  chainId: 689,
});

The SDK automatically includes it in the X-API-Key header on every API request.

Rate Limits

Rate limits are enforced per API key, based on your plan:

When limits are exceeded, the API returns HTTP 429 with a Retry-After header.

Rotate a Key

Rotation generates a new key and immediately revokes the old one:

1. Click the Rotate button on an existing key
2. Copy the new key (shown once)
3. Update your application configuration
4. The old key stops working immediately

Revoke a Key

Revoking a key disables it permanently (soft delete). Revoked keys cannot be reactivated — generate a new one instead.

Plan Limits