API keys

Create, scope, and revoke gateway API keys from the dashboard.

API keys let your apps and scripts call the gateway directly. They are issued per team and respect the team's credit balance and spending limits.

Create a key

  1. Open the dashboard and switch to the team you want the key billed against.
  2. Go to Settings → API keys.
  3. Click Create key, give it a clear name (for example production-backend), and choose the scopes it needs.
  4. Copy the key — it is only shown in full once.

Scopes

Keys carry scopes that limit what they can do. Common scopes include calling the AI APIs, reading analytics, or managing apps. Always start with the smallest scope set and expand only when needed.

Rotate or revoke

  • Rotate when you suspect a key was leaked or when you rotate environment variables.
  • Revoke when an integration is decommissioned. Revoked keys stop working immediately.

Both actions live next to each key on the API keys settings page.

Spending limits

You can attach spending caps per app or per key — see Spending limits. Limits apply before any provider call, so a runaway loop cannot bill more than you allow.

Using your key

Point the OpenAI SDK at the gateway and pass your key as the Authorization header. For full SDK examples and other languages, see the developer Quickstart and Authentication reference.