Create API Key

1

Enable API Key Access

Go to Settings › Security › Security policies and make sure Enable API key creation under Other settings is turned on. If it is disabled, contact your workspace owner to enable it.

2

Start a New API Key creation

In Settings › API keys, click New API key. Enter a name, select a team role, an expiration period, account access, and (optionally) specify allowed IP addresses.

3

Generate or Supply Your Key Pair

Bron uses asymmetric keys. You have two options:

Generation type	Description
Self-generation	Generate the key pair yourself and share only the public key with Bron. Keep the private key secure.
Browser generation	The browser generates the key pair; the private key never leaves the browser and is shown only once.

When you supply your own JWK, it must meet these requirements:

Property	Requirement
kty	Must be `"EC"`.
crv	One of `"P-256"`, `"P-384"`, `"P-521"`, `"SECP256K1"` or `"Ed25519"`.
x, y	Both required; base64url-encoded curve coordinates.
No private fields	Must not include `"d"` or any other private-key material.
kid (optional)	20–30 alphanumeric characters or hyphens (`^[0-9A-Za-z\-]{20,30}$`). Auto-generated if omitted.

Example JWK

{"kty": "EC", "crv": "P-256", "x": "f83OJ3…x5YhE", "y": "x_FEzRu9…GtENQ", "kid": "a1B2c3D4e5F6g7H8i9J0"}

How to generate a key?

You can use any library that supports ES256 and JWK. For example:

JavaScript (Node.js): panva/jose
Java: Nimbus JOSE + JWT
Or any other ES256-compatible library.

Node.js example:

import { generateKeyPair, exportJWK } from 'jose';

const { publicKey, privateKey } = await generateKeyPair('ES256');
const publicJwk  = await exportJWK(publicKey);
const privateJwk = await exportJWK(privateKey);

console.log(JSON.stringify(publicJwk));  // Send this to Bron
console.log(JSON.stringify(privateJwk)); // Keep this safe

API Documentation

assets

intents

workspaces

accounts

address-book

addresses

balances

canton

stake

transaction-limits

transactions