Sky Mavis · Authentication Profile

Sky Mavis Authentication

Authentication

Sky Mavis secures its APIs with apiKey, oauth2, and openIdConnect across 3 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode, clientCredentials, refreshToken, and implicit flow(s).

CompanyBlockchainWeb3GamingNFTWalletsJSON-RPCCryptocurrencyDeveloper Tools
Methods: apiKey, oauth2, openIdConnect Schemes: 3 OAuth flows: authorizationCode, clientCredentials, refreshToken, implicit API key in: header

Security Schemes

SkynetApiKey apiKey
· in: header ()
RoninWaypointOIDC openIdConnect
PublicJSONRPC none

Source

Authentication Profile

sky-mavis-authentication.yml Raw ↑ 
generated: '2026-07-21'
method: searched
source: https://docs.skymavis.com/ + https://athena.skymavis.com/.well-known/openid-configuration + live 401 probe
docs: https://docs.skymavis.com/get-started#get-api-key
summary:
  types: [apiKey, oauth2, openIdConnect]
  api_key_in: [header]
  oauth2_flows: [authorizationCode, clientCredentials, refreshToken, implicit]
schemes:
- name: SkynetApiKey
  type: apiKey
  in: header
  parameter_name: X-API-KEY
  description: >-
    API-gateway products (Skynet Web3 API, Origins/AXP, Ronin Market/Store partner
    APIs, gateway JSON-RPC) require an X-API-KEY header. Keys are issued per app
    from the Ronin Developer Console. A request without a key returns HTTP 401 with
    body {"message":"No API key found in request"}.
  applies_to:
  - Ronin Skynet Web3 API
  - Axie Infinity Origins API
  - AXP API
  - Ronin Market Partner API
  - Ronin Store API
- name: RoninWaypointOIDC
  type: openIdConnect
  openid_connect_url: https://athena.skymavis.com/.well-known/openid-configuration
  issuer: https://athena.skymavis.com/
  authorization_endpoint: https://athena.skymavis.com/oauth2/auth
  token_endpoint: https://athena.skymavis.com/oauth2/token
  jwks_uri: https://athena.skymavis.com/.well-known/jwks.json
  grant_types: [authorization_code, client_credentials, refresh_token, implicit]
  pkce: true
  description: >-
    Ronin Waypoint is an OAuth2 / OpenID Connect account service and keyless
    wallet used to onboard players into Ronin games. PKCE is supported
    (code_challenge_methods_supported present in discovery).
- name: PublicJSONRPC
  type: none
  description: >-
    The public Ronin mainnet JSON-RPC endpoint (https://api.roninchain.com/rpc)
    is reachable without a key for read/broadcast calls (verified: eth_chainId
    returns 0x7e4 / chain 2020). Higher rate limits and archive access are served
    through the authenticated api-gateway.skymavis.com JSON-RPC surface.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/sky-mavis-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.