Authentication — YoorQuezt Docs

Authentication Methods

All authenticated API requests require an API key passed via the X-API-Key header:

curl https://api.yoorquezt.com/v1/status \
  -H "X-API-Key: yq_live_your_api_key"

For the protected RPC endpoint, pass the API key via header and specify the chain in the URL path:

https://rpc.yoorquezt.com/v1/rpc/{CHAIN}

API Key Types

Prefix	Environment	Usage
`yq_test_`	Testnets only	Development and testing. Works on Sepolia, Arbitrum Sepolia, Base Sepolia.
`yq_live_`	Mainnet	Production use. Works on all mainnet chains.

Test keys are issued immediately upon registration. Live keys require email verification.

Access Tiers

Tier	Rate Limit	Chains	Features
Free	100 req/s	All testnets + 3 mainnets	MEV protection, rebates
Pro	1,000 req/s	All chains	Priority routing, analytics dashboard, webhook events
Enterprise	Unlimited	All chains	Dedicated nodes, custom rebate splits, SLA, direct support

Upgrade your tier at yoorquezt.io/portal/dashboard or contact sales@yoorquezt.com for Enterprise.

Key Rotation

Rotate your API key without downtime. The old key remains valid for 24 hours after rotation.

curl -X POST https://api.yoorquezt.com/v1/keys/rotate \
  -H "X-API-Key: yq_live_current_key" \
  -H "Content-Type: application/json"

Response:

{
  "new_key": "yq_live_new_key_here",
  "old_key_expires_at": "2026-03-16T12:00:00Z"
}

WebSocket Authentication

For WebSocket connections (streaming, subscriptions), pass the API key as a query parameter:

wss://ws.yoorquezt.com/v1?api_key=yq_live_your_api_key

Or authenticate after connection via the first message:

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "auth",
  "params": {
    "api_key": "yq_live_your_api_key"
  }
}

Code Examples

TypeScript

import { YoorQueztProvider } from "@yoorquezt/sdk-mev";

const provider = new YoorQueztProvider({
  apiKey: process.env.YQ_API_KEY,
  chainId: 1,
});

const tx = await provider.request({
  method: "eth_sendRawTransaction",
  params: [signedTx],
});

Python

from yoorquezt_sdk_mev import YoorQueztProvider

provider = YoorQueztProvider(api_key=os.environ["YQ_API_KEY"], chain_id=1)
tx = provider.send_protected_transaction(signed_tx)

curl

# REST API
curl https://api.yoorquezt.com/v1/status \
  -H "X-API-Key: $YQ_API_KEY"

# Protected RPC
curl -X POST "https://rpc.yoorquezt.com/v1/rpc/ethereum" \
  -H "X-API-Key: $YQ_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"eth_sendRawTransaction","params":["0x..."]}'

Security Best Practices

Never commit API keys to version control
Use environment variables or a secrets manager
Use test keys (yq_test_) during development
Rotate keys immediately if compromised
Restrict keys to specific IP addresses in the dashboard (Pro and Enterprise tiers)