API Key Management

Users on a paid plan can create multiple API keys that share a single billing pool. Each key can optionally have its own credit limit as a sub-cap within the plan quota.

All endpoints require authentication via an existing X-API-Key header.

Base path: /public/billing/api-keys

Endpoints

• List API Keys — Returns all API keys for your account (active and revoked). The key value is masked.
• Create API Key — Creates a new key under the same billing subscription. The full key value is only returned once — save it.
• Update API Key — Updates the label, active status, or credit limit of a key. Revoked keys cannot be modified.
• Revoke API Key — Permanently revokes a key. Revoked keys stop working immediately and cannot be re-activated.

Credit Limits and Quota

• The plan quota is shared across all keys on the account.
• Setting credit_limit on a key adds a secondary per-key cap. A request is rejected if either the plan quota or the key's credit limit is exhausted.
• Setting credit_limit to null makes the key share the full plan quota without restriction.
• The last active key on an account cannot be revoked.