1
Enable API Key Access
Go to Workspace › Security and make sure Enable API key creation is turned on. If it is disabled, contact your workspace owner to enable it.

2
Start a New API Key creation
In Workspace › API Keys, click New API Key. Enter a name, select a role, and (optionally) specify allowed IP addresses.

3
Generate or Supply Your Key Pair
Bron uses asymmetric keys. You have two options:
When you supply your own JWK, it must meet these requirements:
Example JWK
| Generation type | Description |
|---|---|
| Self-generation | Generate the key pair yourself and share only the public key with Bron. Keep the private key secure. |
| Browser generation | The browser generates the key pair; the private key never leaves the browser and is shown only once. |
| Property | Requirement |
|---|---|
| kty | Must be "EC". |
| crv | One of "P-256", "P-384", "P-521", "SECP256K1" or "Ed25519". |
| x, y | Both required; base64url-encoded curve coordinates. |
| No private fields | Must not include "d" or any other private-key material. |
| kid (optional) | 20–30 alphanumeric characters or hyphens (^[0-9A-Za-z\-]{20,30}$). Auto-generated if omitted. |
How to generate a key?
How to generate a key?
You can use any library that supports ES256 and JWK. For example:
- JavaScript (Node.js): panva/jose
- Java: Nimbus JOSE + JWT
- Or any other ES256-compatible library.
