Authentication

Authenticate your requests with a scoped API key.

API key format

Keys are prefixed aegix_live_ followed by a random base58 string. Send them in the Authorization header, never in a URL.

Authorization: Bearer aegix_live_<base58>

Create a key

Keys are created in the developer portal. Each key carries a set of scopes and an optional expiration.

  • intelligence:read — read wallet & compare intelligence
  • usage:read — read your usage/quota summary

Secret handling

  • The full key is shown exactly once at creation and rotation.
  • Only a one-way hash is stored server-side.
  • AEGIX never retrieves the plaintext key again.
  • Rotate a key to invalidate the old one immediately.
Never log, commit, or expose API keys. Treat them like passwords.