Secure API Key Management

Your Crossmint API key is very powerful. It allows you to mint new NFTs, and also to edit them.

To prevent malicious agents from compromising your project:

  • Never share these keys with others or using non encrypted channels.
  • Never commit these keys in code that is saved to version control, like Git. Instead, use environment variables.
  • Never use these keys from the client side / frontend of your website. These keys should only be used from the server side.
If your API key gets compromised, delete it ASAP on the developer console. You can generate a new one to continue using your contracts.
Set up a Claims PageBring Your Own Contract