Skip to Content
Authentication

Authentication

Authentication is tied to your assigned endpoint URL. Your API key is embedded in the URL path, so any request sent to your full endpoint URL is authenticated; there is no separate API-key header. Treat the URL itself as a secret.

Getting access

Sign up at spectrumnodes.com to get your assigned endpoint URL. It already includes your key, e.g. https://your-endpoint.simplystaking.xyz/YOUR_API_KEY/v1.

Using your endpoint

Direct HTTP

POST JSON-RPC payloads straight to your full endpoint URL, no auth header required:

curl -X POST https://your-endpoint.simplystaking.xyz/v1 \
  -H "Content-Type: application/json" \
{
  "jsonrpc": "2.0",
  "method": "getBlockHeight",
  "params": {
    "chain": "ethereum"
  },
  "id": 1
}

SDK

import { Spectrum } from '@spectrumnodes/sdk';
 
const spectrum = new Spectrum({
  api: 'https://your-endpoint.simplystaking.xyz/YOUR_API_KEY/',
});

The SDK sends requests directly to your assigned endpoint URL.

Security best practices

  • Never expose your endpoint URL in client-side code (it contains your key). Use a backend proxy or serverless function.
  • Use environment variables to store the full endpoint URL:
export SPECTRUM_API=https://your-endpoint.simplystaking.xyz/YOUR_API_KEY/
const spectrum = new Spectrum({
  api: process.env.SPECTRUM_API!,
});
  • Rotate keys if you suspect your endpoint URL has been compromised. Generate a new endpoint from the dashboard and update your applications.

Unauthenticated endpoints

The health check endpoint does not require a key:

curl https://your-endpoint.simplystaking.xyz/health
Getting StartedOverview