Sky Mavis · Authentication Profile

Sky Mavis Authentication

Authentication

Sky Mavis secures its APIs with apiKey, oauth2, and openIdConnect across 3 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode, clientCredentials, refreshToken, and implicit flow(s).

CompanyBlockchainWeb3GamingNFTWalletJSON-RPCCryptocurrencyDeveloper Tools
Methods: apiKey, oauth2, openIdConnect Schemes: 3 OAuth flows: authorizationCode, clientCredentials, refreshToken, implicit API key in: header

Security Schemes

SkynetApiKey apiKey
· in: header ()
RoninWaypointOIDC openIdConnect
PublicJSONRPC none

Source

Authentication Profile

sky-mavis-authentication.yml Raw ↑ 
generated: '2026-07-21'
method: searched
source: https://docs.skymavis.com/ + https://athena.skymavis.com/.well-known/openid-configuration + live 401 probe
docs: https://docs.skymavis.com/get-started#get-api-key
summary:
  types: [apiKey, oauth2, openIdConnect]
  api_key_in: [header]
  oauth2_flows: [authorizationCode, clientCredentials, refreshToken, implicit]
schemes:
- name: SkynetApiKey
  type: apiKey
  in: header
  parameter_name: X-API-KEY
  description: >-
    API-gateway products (Skynet Web3 API, Origins/AXP, Ronin Market/Store partner
    APIs, gateway JSON-RPC) require an X-API-KEY header. Keys are issued per app
    from the Ronin Developer Console. A request without a key returns HTTP 401 with
    body {"message":"No API key found in request"}.
  applies_to:
  - Ronin Skynet Web3 API
  - Axie Infinity Origins API
  - AXP API
  - Ronin Market Partner API
  - Ronin Store API
- name: RoninWaypointOIDC
  type: openIdConnect
  openid_connect_url: https://athena.skymavis.com/.well-known/openid-configuration
  issuer: https://athena.skymavis.com/
  authorization_endpoint: https://athena.skymavis.com/oauth2/auth
  token_endpoint: https://athena.skymavis.com/oauth2/token
  jwks_uri: https://athena.skymavis.com/.well-known/jwks.json
  grant_types: [authorization_code, client_credentials, refresh_token, implicit]
  pkce: true
  description: >-
    Ronin Waypoint is an OAuth2 / OpenID Connect account service and keyless
    wallet used to onboard players into Ronin games. PKCE is supported
    (code_challenge_methods_supported present in discovery).
- name: PublicJSONRPC
  type: none
  description: >-
    The public Ronin mainnet JSON-RPC endpoint (https://api.roninchain.com/rpc)
    is reachable without a key for read/broadcast calls (verified: eth_chainId
    returns 0x7e4 / chain 2020). Higher rate limits and archive access are served
    through the authenticated api-gateway.skymavis.com JSON-RPC surface.