Authentication

Every request to the NGN Market API must include a valid API key in the Authorization header. The API validates the key on every request and returns an error immediately if it is missing, malformed, or revoked.

Generate an API key

API keys are created and managed from your developer dashboard.

Log in at ngnmarket.com
Go to Dashboard → Developer
Click Generate API key, give it a name, and confirm
Copy the key immediately.

Your key will look like this:

ngm_live_a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6

Copy your key before leaving the page. If you lose it, revoke it and generate a new one.

Attach the key to requests

Pass your key in the Authorization header using the Bearer scheme on every request:

Authorization: Bearer ngm_live_YOUR_KEY

curl https://api.ngnmarket.com/v1/market/snapshot \
  -H "Authorization: Bearer ngm_live_YOUR_KEY"

const res = await fetch('https://api.ngnmarket.com/v1/market/snapshot', {
  headers: { 'Authorization': 'Bearer ngm_live_YOUR_KEY' }
});
const data = await res.json();

const res = await fetch('https://api.ngnmarket.com/v1/market/snapshot', {
  headers: { 'Authorization': 'Bearer ngm_live_YOUR_KEY' }
});
const data: Record<string, unknown> = await res.json();

import requests

res = requests.get(
    'https://api.ngnmarket.com/v1/market/snapshot',
    headers={'Authorization': 'Bearer ngm_live_YOUR_KEY'}
)
print(res.json())

The WebSocket API is the one exception to the header rule above. Browsers can’t set a custom header on a WebSocket handshake, so it takes your key as a ?api_key= query parameter instead.

Managing your keys

From the developer dashboard, you can view all your keys (name, creation date, last used), create up to 5 active keys per account, each named so you can tell which app or environment it belongs to, and revoke a key at any time. Revoking a key invalidates it immediately, any request using a revoked key returns INVALID_API_KEY from that point on, and revoked keys stay visible in the dashboard for your audit trail.

Create one key per app or environment (e.g. “Production”, “Staging”, “Local dev”). If a key is ever exposed, you can revoke just that one without affecting the others.

All keys on your account share a single monthly quota pool. Quota usage is tracked per account, not per key. See Rate limits for details.

Authentication errors

Error code	Status	Cause
`MISSING_API_KEY`	401	`Authorization` header is missing or not in `Bearer <key>` format
`INVALID_API_KEY`	401	Key not found, already revoked, or does not start with `ngm_`

{
  "success": false,
  "error": {
    "code": "INVALID_API_KEY",
    "message": "API key not found or revoked."
  }
}

Get Started

For AI Agents

Plans & Limits

Core Concepts

Generate an API key

Attach the key to requests

Managing your keys

Authentication errors

​Generate an API key

​Attach the key to requests

​Managing your keys

​Authentication errors

Generate an API key

Attach the key to requests

Managing your keys

Authentication errors