Key Scopes

Scopes limit which SUMUN product operations an API key can call.

Scope	Access
contracts:audit	Retrieve contract audit results
contracts:source	Retrieve verified source or a decompiled reconstruction
transactions:simulate	Run pre-transaction simulation

Apply least privilege: select only the scopes needed by the integration. Use separate keys for development, staging, production, and independent consumers so that credentials can be revoked and monitored separately.

An account can have up to 10 active API keys. A valid key without the scope required by an endpoint is rejected.