To access the Bron API, you need an API key. Follow the steps below to create one:
1

Enable API Key Access

Go to Workspace › Security and make sure Enable API key creation is turned on. If it is disabled, contact your workspace owner to enable it.
Workspace Security Settings
2

Start a New API Key creation

In Workspace › API Keys, click New API Key. Enter a name, select a role, and (optionally) specify allowed IP addresses.
New API Key Form
3

Generate or Supply Your Key Pair

Bron uses asymmetric keys. You have two options:
Generation typeDescription
Self-generationGenerate the key pair yourself and share only the public key with Bron. Keep the private key secure.
Browser generationThe browser generates the key pair; the private key never leaves the browser and is shown only once.
When you supply your own JWK, it must meet these requirements:
PropertyRequirement
ktyMust be "EC".
crvOne of "P-256", "P-384", "P-521", "SECP256K1" or "Ed25519".
x, yBoth required; base64url-encoded curve coordinates.
No private fieldsMust not include "d" or any other private-key material.
kid (optional)20–30 alphanumeric characters or hyphens (^[0-9A-Za-z\-]{20,30}$). Auto-generated if omitted.
Example JWK
{"kty": "EC", "crv": "P-256", "x": "f83OJ3…x5YhE", "y": "x_FEzRu9…GtENQ", "kid": "a1B2c3D4e5F6g7H8i9J0"}
You can use any library that supports ES256 and JWK. For example:Node.js example:
import { generateKeyPair, exportJWK } from 'jose';

const { publicKey, privateKey } = await generateKeyPair('ES256');
const publicJwk  = await exportJWK(publicKey);
const privateJwk = await exportJWK(privateKey);

console.log(JSON.stringify(publicJwk));  // Send this to Bron
console.log(JSON.stringify(privateJwk)); // Keep this safe