Free IDE extension for risk-free vibe coding — keep secrets out of AI.
Manage
POST /api/api-keysCreate and manage scoped API keys with granular permissions. Generate separate keys for development, staging, and production with independent rate limits and access controls.
Complete these steps in order. The dashboard link opens the exact product workspace for this service.
Sign in, select the project you want to protect, then open API Keys.
Generate cryptographically random API keys with configurable prefixes and metadata.
Use POST /api/api-keys from server-side code. Keep API keys out of browsers and client bundles.
Run one safe case and one expected-risk case. Confirm the result in API Keys, then review Guard Logs before enabling the control for production traffic.
API keys are the primary authentication mechanism for SoterAI. Proper key management — with scoped permissions, rotation policies, and usage monitoring — is essential for maintaining security.
A step-by-step breakdown of how API Keys protects your AI.
Generate cryptographically random API keys with configurable prefixes and metadata.
Assign specific permissions and rate limits to each key.
Track which API key is making each request for usage attribution.
Rotate keys on schedule or on demand with zero-downtime overlapping validity.
Assign read-only, write, or admin access per key
Independent rate limits per API key
Every API call is attributed to the specific key used
Overlapping key validity for zero-downtime rotation
This service is implemented at the application route below. Use the tested SDK and framework guides for copy-paste integration examples.
POST /api/api-keys. API keys must stay server-side. See the REST API guide and related documentation before integrating.