Skip to content

Machine authentication

Secure. Simple machine authentication for your APIs and machines.

Issue, verify, and revoke API keys through one HTTP API—without building and operating an authentication system of your own.

  • Less than 10 minutes to your first verified key
  • 10,000 keys on the free plan
  • Works with any stack that speaks HTTP
Verify an API key in one request
RequestPOST /v1/verify-key
{
  "realm_id": "defaultrealm",
  "api_key": "ez_••••••••••"
}
Response200 OK
{
  "valid": true,
  "app": { "name": "payments" },
  "realm": { "name": "production" }
}

Simple by design

Three operations. One small authentication model.

Give every machine its own identity without turning authentication into another internal platform. Enzoguard keeps the lifecycle explicit from the first key to the millionth.

  1. 01

    Issue

    Create an app for a service, customer, agent, or workload. Issue a unique API key through the API and deliver the plaintext value once.

    POST /v1/realms/{realm_id}/apps/{app_id}/api-keys
  2. 02

    Verify

    Send the key and realm to Enzoguard. A successful response gives your backend the verified app and realm identity it needs to authorize the request.

    POST /v1/verify-key
  3. 03

    Revoke

    Delete one compromised or retired key. Enzoguard propagates the revocation globally in under one second, without rotating unrelated credentials.

    DELETE /v1/realms/{realm_id}/apps/{app_id}/api-keys/{api_key_id}

Simple scales

Keep authentication out of your operational backlog.

A homegrown API-key system starts as a table and a hash. At scale, it also needs safe issuance, lookup, isolation, revocation, and a reliable verification path. Enzoguard packages that machinery behind a focused API and a small resource model.

Explore the resource model

Simple to secure

Less credential machinery to get wrong.

Security is easier to reason about when every credential has one purpose and a clear lifecycle.

  • One-time plaintext.The complete API key is returned only when it is created. Stored API-key resources never contain it.
  • Separate responsibilities.System keys manage configuration; customer API keys identify the machines using your product.
  • Targeted revocation.Revoke one key globally in under one second without redeploying or disrupting other identities.

Pricing

Start free — no credit card needed.

Every plan uses the same API and resource model. Move up when you need more keys or verification throughput.

Free

Free

$0/ month

For prototypes and small services.

  • 2realms
  • 10,000apps
  • 10,000API keys
  • 60/minverifications
  • 20/minreads
  • 20/minwrites
Start free

High throughput

Professional

$99/ month

For critical, high-scale systems.

  • 5realms
  • 1 millionapps
  • 1 millionAPI keys
  • 1,000/minverifications
  • 60/minreads
  • 60/minwrites
Choose Professional

Maximum scale

Business

$299/ month

For organizations with unlimited storage needs.

  • Unlimitedrealms
  • Unlimitedapps
  • UnlimitedAPI keys
  • 10,000/minverifications
  • 60/minreads
  • 60/minwrites
Choose Business

Start with one key

Add machine authentication in one sitting.

Open a free account, issue your first API key, and verify it in less than 10 minutes.