Authentication
Authenticate every connection with your project JWT, passed as a ?token= query parameter on the upgrade URL. Browsers can't set headers on a WebSocket upgrade, so the token rides on the URL for every client — browser, Node, Go, anything.
wss://ws.pinax.network/ws/<network@table>?token=<JWT>
Grab the JWT from your project's API keys page. Treat it like a password — anyone holding it can open a stream against your quota. Rotate via the dashboard if it leaks.