generated: '2026-09-13'
method: searched
source: https://coinnudge.site/data/api-docs
name: CoinNudge Data API Authentication
description: >-
  The CoinNudge Data API authenticates every request with a customer-issued API
  key presented as an HTTP Bearer token. Keys are minted in the private key and
  download workspace and are scoped to the account's active plan. There is no
  OAuth, OpenID Connect, or public no-key tier: even the free Research scope
  requires a signed-in account key.
schemes:
  - type: http
    scheme: bearer
    header: Authorization
    format: 'Authorization: Bearer <API_KEY>'
    key_prefix: cnd_
    placement: request header only (never in query string or public contexts)
    notes: >-
      A 401 is returned for invalid, missing, or revoked keys. Anonymous probes
      of both the free Research catalog and the paid Market Events catalog return
      401 with detail "Use a customer data Bearer key, not an internal audit
      token.", confirming the whole surface is key-gated.
key_management:
  issued_at: https://coinnudge.site/data/workspace
  key_slots_by_plan:
    free: 1 key
    researcher: 1 key
    research_desk: up to 5 keys (rate limit shared across the account)
  slot_exhaustion_status: 409 (all API key slots exhausted)
oauth2: false
openid_connect: false
mutual_tls: false