Overview
BlockDB authenticates REST and WebSocket traffic with API keys. Send your key in theAuthorization header on every request that requires authentication. Keys are tied to your subscription: which datasets and chains you can query, your compute unit allowance, and your rate limit. See the dataset index and Dataset ID for how products map to blockdb_evm tables.
There is no separate token endpoint and no OAuth flow. The string you copy from the dashboard is the credential you pass as
Bearer <key>.Get an account and API keys
Open an account
Sign up at accounts.blockdb.io if you do not already have a BlockDB account.
Create and manage keys in the dashboard
Open dashboard.blockdb.io. There you can:
- Create new API keys (up to 5 active keys per account)
- Label keys (for example production vs staging)
- Rotate a key when you need a new secret while phasing out an old one
- Revoke a key that is compromised or no longer needed
Code examples: call the API with an API key
SetBLOCKDB_API_KEY in your environment (or substitute the value from the dashboard). These examples use the historic REST base URL https://api.blockdb.io/v1.
Official SDKs
The .NET, Python, and JavaScript SDKs accept your API key and attachAuthorization: Bearer for you. See each SDK page for the exact constructor and configuration options.
Security practices
- Rotation: Create a new key in the dashboard, deploy it, then revoke the old key.
- Least privilege: Use separate keys for production and non-production when possible (within the five-key limit).
- Incidents: Revoke a key immediately if it leaks; create a replacement in the dashboard.
See Also
- Usage & Limits —
plan,cu_*, andrate_limit_rpsfor your key - Rate Limiting — RPS, backoff, and
429handling - Error Codes — Full error reference
- Troubleshooting: API Authentication Failures — 401/403 runbook