API keys
Create revocable and restricted credentials for each client.
Create a key
Create a separate key for each app or environment and give it a recognizable name. Store the copied key in the client's secure credential location.
Quota and expiration
Key quota limits how much that key can consume, while actual calls still depend on account balance. Expiration automatically stops temporary clients. Keys without expiration must be disabled or deleted manually.
Model and IP restrictions
Model restrictions form an allowlist. Leaving it empty permits every model available to the account. IP allowlists accept CIDR but should be combined with trusted proxy or CDN configuration.
Groups and retry
A fixed group locks pricing and channel routing. Automatic grouping follows server policy. With cross-group retry enabled, the gateway tries other available groups after the current group fails.