RenderNestv1.0
Sign inDashboard
Authentication

API Key Security

RenderNest authenticates all API requests using cryptographically generated Bearer tokens.

Header Format

Pass your API key in the standard HTTP Authorization header prefixed with Bearer:

Authorization: Bearer wf_live_9a7b8c1d2e3f405162738495a6b7c8d9

Key Environments

RenderNest supports two distinct key environments:

  • Live (wf_live_...): Production keys connected to live billing and real quota balances.
  • Test (wf_test_...): Sandbox keys for CI/CD, unit testing, and isolated staging workloads.

Security Architecture

RenderNest never stores your raw API keys in plain text. Keys are hashed with SHA-256 upon generation. When an authenticated request arrives, its hash is verified against the database index.

If a key is compromised, revoke it immediately from the dashboard. Revocation takes effect instantly across all edge workers.