Keys. Limits. Hooks. Docs. Everything between your code and production.
API keys with scopes. Hash on store. Show once.
Sliding window. Free and Pro tiers. Headers on every response.
HMAC-signed. Retry with backoff. Delivery logs.
We replaced 400 lines of auth middleware with Nexus. Keys, rate limits, and webhook delivery — all handled.
— Engineering team at a YC startup
Yes. 100 requests/day, 10/minute. No credit card needed.
Create an API key in the dashboard. Pass it as a Bearer token or query param.
You get a 429 response with a Retry-After header. The X-RateLimit-Remaining header tells you how many requests you have left.
Register a URL, pick your events. We POST signed payloads with HMAC-SHA256. Failed deliveries retry 3 times with exponential backoff.
Revoke the old key and create a new one. Active integrations using the old key will stop working immediately.
v2 returns tags as arrays instead of comma strings, adds search and tag filtering, and includes a version field.