API Key Management

List API Keys

Retrieve all API keys associated with your wallet.

GET /v2/account/api-keys

Authentication

This endpoint requires wallet signature headers:

Header	Description
`x-api-wallet-address`	Your wallet address
`x-api-wallet-signature`	EIP-191 signature

Response

{
  "api_keys": [
    {
      "api_key": "api_1a2b3c4d5e6f7g8h9i0j",
      "name": "registered_0x12345678",
      "is_active": true,
      "created_at": "2026-03-18T10:00:00Z"
    },
    {
      "api_key": "api_9z8y7x6w5v4u3t2s1r0q",
      "name": "registered_0x12345678",
      "is_active": true,
      "created_at": "2026-03-18T12:00:00Z"
    }
  ]
}

Python Example

import requests

api_key = "api_..."
headers = {"x-api-key": api_key}

resp = requests.get(
    "https://api.hypereth.io/v2/account/api-keys",
    headers=headers,
)
for key in resp.json()["api_keys"]:
    status = "active" if key["is_active"] else "inactive"
    print(f"{key['api_key']}: {status} (created {key['created_at']})")

Delete an API Key

Soft-delete an API key and its associated venue credentials.

DELETE /v2/account/api-keys/{api_key}

Path Parameters

Parameter	Description
`api_key`	The API key to delete

Authentication

Requires wallet signature headers (same as list endpoint).

Response

HTTP 204 No Content on success.

Behavior

The API key is soft-deleted (marked inactive)
Associated venue credentials are removed
For Model 1 venues: triggers agent revocation
You must use a different active API key to delete a key

Python Example

import requests

api_key = "api_..."  # your active API key
key_to_delete = "api_9z8y7x6w5v4u3t2s1r0q"

headers = {"x-api-key": api_key}

resp = requests.delete(
    f"https://api.hypereth.io/v2/account/api-keys/{key_to_delete}",
    headers=headers,
)
if resp.status_code == 204:
    print("API key deleted successfully")

cURL Example

curl -s -o /dev/null -w "%{http_code}" -X DELETE \
  "https://api.hypereth.io/v2/account/api-keys/$KEY_TO_DELETE" \
  -H "x-api-key: $API_KEY"
# Expected: 204

Best Practices

Use separate keys per agent — don't share one API key across multiple agents
Rotate periodically — generate new API keys and delete old ones
Store securely — use environment variables or secrets vaults, never hardcode API keys

API Key Management

On this page