Skip to main content
An API key can propose escrow transactions and poll them, but it cannot confirm one. Only the owner, signed in to the dashboard, can.

​
Sending an API key

Use either header. If both are present, x-api-key is used.
A missing key returns 401 with {"error": "missing API key (send x-api-key)"}. An unknown or revoked key returns 401 with {"error": "invalid or revoked API key"}.

​
Creating a key

  1. Sign in at harness.chance.cc/keys.
  2. Click Create key.
  3. Copy the key. It is shown once.
A key is chance_sk_live_ followed by 32 random characters. Chance stores only its SHA-256 hash and a short display prefix, so a lost key cannot be recovered. Create a new one and revoke the old one.
A key can spend your credits and propose transactions from your escrow wallets. Keep it server-side, in an environment variable or a secrets manager. Never ship it in browser or mobile code.

​
Revoking a key

Revoke a key on the same page. It stops working immediately: requests with it return 401. Each key draws on its account’s credits. Give each service its own key so you can revoke one without touching the others.