---
title: "0xinsider authentication"
description: "Current API-key authentication, public discovery endpoints, and agent access guidance."
canonical: "https://0xinsider.com/auth"
last-updated: 2026-09-11
---

# 0xinsider authentication

The 0xinsider Developer API uses API keys in an HTTP Bearer authorization header. This page documents the current API-key contract for agents and developers.

## Authentication status

OAuth 2.0 is not currently offered by 0xinsider. There is no OAuth authorization server, authorization-server metadata document, or OAuth client-registration flow to use. Do not invent an OAuth issuer or send an API key to an OAuth endpoint.

## API key flow

1. Open https://0xinsider.com/developers and sign in.
2. Use the Developer API token controls to create or regenerate an API key.
3. Store the key in a secret manager or process environment. Never put it in a URL, browser history, source repository, or prompt.
4. Send it only in the header Authorization: Bearer <api-key> to the documented API origin.
5. Start with GET https://api.0xinsider.com/api/v1 to read the live route index and canonical OpenAPI URL.

Example request shape:

~~~sh
curl -sS \
  -H "Authorization: Bearer $OXI_API_KEY" \
  https://api.0xinsider.com/api/v1/leaderboard
~~~

## Public operations

The API discovery document (GET /api/v1), health check (GET /api/v1/health), and platform capability document (GET /api/v1/platforms) are public. Data, export, webhook, usage, and remote MCP operations require an API key and may also require an active Pro subscription.

## Errors and throttling

Treat 401 as a missing or invalid key and 403 as an authorization or origin policy failure. Read the JSON error object before retrying. On 429, use Retry-After and the standard RateLimit-Limit, RateLimit-Remaining, and RateLimit-Reset headers. Do not retry an invalid key.

## Related machine-readable resources

- API discovery: https://0xinsider.com/api/v1
- OpenAPI 3.1: https://0xinsider.com/api/v1/openapi.json
- Full agent reference: https://0xinsider.com/llms-full.txt
- Agent instructions: https://0xinsider.com/agents.md
- Versioning and deprecation policy: https://0xinsider.com/api-versioning.md