Aex402 Com Authentication

generated: '2026-10-31'
method: derived
source: openapi/rpc-aex402-com-openapi.json
summary:
  types:
  - apiKey
  - http
  api_key_in:
  - header
  - query
schemes:
- name: BearerAuth
  type: http
  scheme: bearer
  description: API key (sk-aex-v1-...). Recommended for programmatic access. Create via POST
    /v1/api-keys.
  sources:
  - openapi/rpc-aex402-com-openapi.json
- name: ApiKeyQuery
  type: apiKey
  in: query
  parameter: key
  description: Same API key (sk-aex-v1-...) passed in the URL query (?key=...) instead of the
    Authorization header — for header-less tooling (forge, hardhat, MetaMask, web3.js). Identical
    effect to BearerAuth; draws from prepaid credits, not the free rate limit. A ?session=ses-...
    query is likewise accepted in place of X-Session.
  sources:
  - openapi/rpc-aex402-com-openapi.json
- name: SessionHeader
  type: apiKey
  in: header
  parameter: X-Session
  description: HMAC session token (ses-...). Issued in the X-Session response header after x402
    settlement (PAYMENT-SIGNATURE) or GET /topup?sig=. Proves wallet ownership. 24h sliding
    TTL — every credit-spending response returns a refreshed token.
  sources:
  - openapi/rpc-aex402-com-openapi.json
- name: WalletHeader
  type: apiKey
  in: header
  parameter: X-Wallet
  description: Solana wallet pubkey. READ-ONLY without session/key (balance check only).
  sources:
  - openapi/rpc-aex402-com-openapi.json
- name: PaymentSignature
  type: apiKey
  in: header
  parameter: PAYMENT-SIGNATURE
  description: 'Inline x402 settlement: base64-encoded signed Solana transfer transaction paying
    >= the amount from the 402 body (paidTier.accepts[]) to paidTier.payTo. The worker verifies
    (3-6 instructions, CU limit <= 5000, recipient must match payTo), co-signs as fee payer,
    simulates, submits, and allocates credits — the payer never spends gas. Success returns
    PAYMENT-RESPONSE + X-Session + X-Credits-Remaining'
  sources:
  - openapi/rpc-aex402-com-openapi.json