Inngest: Auth & Event Key Security
Docs-backedEvent keys are used to send events โ each key is a credential that authorizes event ingestion. Signing keys verify that Inngest is calling your functions (request signing). The SDK handles request verification automatically. Event keys can be rotated in the dashboard. No fine-grained scoping on event keys โ a key can send any event type. The cloud platform handles function execution security. For self-hosted development, the Inngest dev server runs locally with no auth required. Production deployment on Inngest Cloud requires account authentication. The security model is appropriate for the event-driven pattern: event keys for ingestion, signing keys for verification, platform auth for management.