API key management

Your sign-in account manages the service; API keys let applications send requests. They serve different purposes.

Creating and managing keys

1. Sign in to the console and open the API tokens page.
2. Name the key after its project or device, for example website-production。
3. Choose a group and configure the model access, quota, expiry and access restrictions provided on the page.
4. Save the key on your application server or in protected local configuration.

Key quota & account balance

A key's quota does not add funds to the account. Insufficient balance, an expired key, a model outside the group or an access restriction can cause requests to be rejected.

If a key is exposed

1. Disable the key immediately.
2. Create a replacement key and update the applications using it.
3. Filter usage by the old key and review unexpected requests.

Keep keys out of public frontend code, screenshots and Git repositories. For support, provide the time and request ID instead of the complete key.