sec-api-key-generate Edge Function — Security

sec-api-key-generate — Generate prefixed API keys

Generates a cryptographically random API key with a human-readable prefix using base62 encoding — no ambiguous characters (0/O, 1/l/I), URL-safe.

---

API

POST /api/sec-api-key-generate

Request body

Field	Type	Required	Default	Description
prefix	string	✅	—	Key prefix, e.g. sk_live, pk_test, webhook
length	number	❌	32	Entropy length (16–64 characters)

Success response (200)

{
  "success": true,
  "data": {
    "key": "sk_live_xK7mNpQ2rT8vWbYhGjF3sLcEuDiAzM9n",
    "prefix": "sk_live",
    "entropy": "xK7mNpQ2rT8vWbYhGjF3sLcEuDiAzM9n"
  }
}

Error responses

Code	HTTP	When
INVALID_INPUT	400	Missing prefix or length out of range
INTERNAL_ERROR	500	Unexpected error

---

Usage

cURL

curl -X POST "$FUNCTION_URL" \
  -H "Content-Type: application/json" \
  -d '{"prefix": "sk_live", "length": 32}'

TypeScript / JavaScript (HTTP)

const response = await fetch(FUNCTION_URL, {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({ prefix: 'sk_live', length: 32 }),
});
const { data } = await response.json();
// Show data.key to the user ONCE, store hash(data.entropy) in DB

Direct import (Node / Bun / Deno)

import { generateApiKey } from '@aerostack/functions/sec-api-key-generate';

const { key, prefix, entropy } = generateApiKey({ prefix: 'sk_live', length: 32 });

---

Use Cases

• Generating API keys when a user creates a new integration or service account
• Issuing prefixed tokens that make key type immediately identifiable (e.g. sk_live vs sk_test)
• Creating webhook secrets for secure delivery verification
• Generating one-time invite codes or access tokens

---

Notes

• Alphabet: 23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz — removes 0, O, 1, l, I to avoid visual confusion
• Uses crypto.getRandomValues with modulo-bias rejection — cryptographically uniform
• Show the full key to the user exactly once — store the hash of entropy in your database, not the plaintext
• The underscore separator between prefix and entropy is always _