Important Changes to Mashape Authorization Keys


In our effort to improve the way keys are handled in Mashape, we have changed the naming and more importantly the way keys are used in Mashape.  This is an important change so we recommend that you read on.


This change is immediate and is reflected NOW in your Mashape account (e.g. Dashboard, Mashape keys, test console, client libraries, etc)


After receiving feedback regarding the trouble and complexity of generating an authorization hash from your Mashape private and public keys, we decided to change and improve the way these keys are interpreted and generated.  One of the problems that arose from generating a hash is when someone intercepts it.  It will compromise your Mashape account in its entirety, leaving all your API access open to anyone who may have intercepted the hash.


To address this problem, we have removed the requirement to generate any hash.  Instead there will be two main keys for you to manage:

  1. Universal key Testing –  used for testing and will have access to every API
  2. Restricted keys Production- used in production, and can be restricted to consume only a specified group of APIs.  (In theory, you can create one restricted key for each API).

Both Testing and the Production keys can be re-generated anytime.


Below are the areas in Mashape where you will see the changes:

  • Client library (Ruby example below):
Ruby client library

Ruby client library

  • Dashboard
Mashape dashboard

Mashape dashboard

  • Keystore panel
Keystore Panel

Keystore Panel

  • Client library download
Client library download

Client library download

Where did my Public and Private Mashape keys go?

To ensure a smooth transition, your original Public and Private keys will still work in your applications.  We would however recommend that you start using the new Universal and Restricted keys moving forward.

We would love to hear your feedback.  Please email us at for any comments and suggestions.



Mashape is the largest API hub in the world where you can consume, distribute, monitor and monetize your public and private APIs. Mashape powers 10,000 public & private APIs in every major industry, including finance, healthcare, and entertainment. We’re a Series A startup backed by Jeff Bezos (Amazon), Eric Schmidt (Google), Stanford University and top tier VC firms including Index Ventures, NEA and CRV.

Introducing API Glossary by Mashape

  When it comes to APIs, there’s a lot of jargon out there. The meaning of certain terms isn’t always obvious, and API providers sometimes use different ones to

OpenSSL Update – Mashape not vulnerable to Heartbleed

On Monday April 7th OpenSSL released an update to address CVE-2014-0160 (aka Heartbleed). This was a vulnerability in the popular cryptographic library that is used to secure many major

Mashape Revenue Share Fees Down 5%. Effective now!

Hello Mashape community, We’re happy to announce a reduced revenue share percentage rate. Going forward monetized APIs will only be charged a 20% revenue share. With ❤. As always, Mashape

Announcing The World’s Largest API Directory –

We know how hard it is to find great APIs. So we built, an API directory where you can instantly search through thousands of APIs and discover public cloud web services. Here’s