Cookie or API key authBrowser sessions via HttpOnly JWT cookie, or programmatic access with Bearer keys (mtk_…).
Credits-based operationsCreate collections and mint with a clear credit cost. Management and metadata writes are free.
Server-signed chain txsEnd users never hold a deployer or minter key. The API owns onchain admin and signs as that role.