WAX · Authentication Profile

Wax Authentication

Authentication

WAX secures its APIs with none and signature across 3 declared security schemes, as derived from its OpenAPI definitions.

CompanyCryptoBlockchainNFTWeb3GamingAntelopeWallets

Methods: none, signature Schemes: 3 OAuth flows: API key in:

Security Schemes

public-read none

transaction-signature signature

scheme: antelope-eosio (secp256k1 / ecc)

wax-cloud-wallet-sso session

Source

Authentication Profile

generated: '2026-07-21'
method: searched
source: https://docs.wax.io/ , https://github.com/worldwide-asset-exchange/waxjs
notes: >-
  WAX is an Antelope (EOSIO fork) blockchain. There is no OpenAPI in the repo to
  derive from; this profile is authored from the public docs and the official
  waxjs SDK. The public Chain/History (Hyperion) RPC read endpoints are
  unauthenticated; state-changing calls are authorized by client-side
  cryptographic signatures over the transaction, produced by a user key or via
  the WAX Cloud Wallet — not by API keys, OAuth, or bearer tokens.
summary:
  types: [none, signature]
  api_key_in: []
  oauth2_flows: []
schemes:
  - name: public-read
    type: none
    applies_to: Chain API (/v1/chain/*) and Hyperion History API (/v1/history/*, /v2/*) read endpoints
    description: >-
      Read RPC endpoints are public and require no credential. Requests are
      HTTP POST (or GET for some Hyperion routes) with a JSON body.
  - name: transaction-signature
    type: signature
    scheme: antelope-eosio (secp256k1 / ecc)
    applies_to: /v1/chain/push_transaction, /v1/chain/send_transaction
    description: >-
      State-changing actions must be packed and signed client-side with the
      account's active/owner key. Signatures are secp256k1 (EOSIO/Antelope
      "K1"). The WAX Cloud Wallet (all-access.wax.io) brokers signing for users
      via wax.login()/wax.api.transact() in @waxio/waxjs; self-custody wallets
      sign locally. The chain verifies the signature against the account's
      permission/authority, not against a server-issued token.
  - name: wax-cloud-wallet-sso
    type: session
    applies_to: WAX Cloud Wallet login flow
    description: >-
      End users authenticate to the WAX Cloud Wallet via email or social SSO at
      all-access.wax.io; the wallet then signs on their behalf. This is an
      end-user auth flow, not an API credential a developer provisions.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/wax-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.