Product
API keys
Create credentials, set limits, inspect usage, and rotate keys.
A credential with boundaries
Create
Permissions + limits
Connect
Server-side Bearer key
Product
Create credentials, set limits, inspect usage, and rotate keys.
A credential with boundaries
Create
Permissions + limits
Connect
Server-side Bearer key
Manage
Inspect usage or revoke
API keys lets your server use AgentPass inference without asking for a wallet signature on every request. Each key spends its owner's shared wallet credit and can have its own permissions and limits.
Connect your wallet, sign in, and verify that it has a .ai Agent ID. Select Create key and enter a descriptive name, such as the name of the application that will use it.
Choose Chat + models to run inference and list models, or Models only for read-only catalog access. Models-only keys cannot generate completions.
| Setting | Behavior |
|---|---|
| Lifetime budget | Optional total spending cap, above $0 and up to $10,000, with six decimal places |
| Expiry | 1 to 365 days; default 90; shortcuts for 30, 90, and 365 |
| Requests per minute | 1 to 30; also subject to the shared wallet limit |
| Allowed models | Select model shortcuts or enter comma-separated IDs; leave blank for every enabled model, including future additions |
A budget includes both settled spending and pending reservations. It does not allocate separate credit or reset after a topup. A wallet can hold 20 active keys and create up to 50 keys per day.
After creation, select Copy key and save the full sk-ap- credential in your server environment. Confirm with I saved my key. The full secret is shown only in that creation dialog. Closing it, navigating away, or changing wallets clears the displayed secret.
The server stores a hash and masked prefix, not a retrievable secret. If you lose the secret, create a replacement and revoke the old key. Keep credentials out of browser code, source control, screenshots, and Chat prompts.
The Connect your app panel provides syntax-highlighted cURL, TypeScript, and Python examples for List models and Chat completion. Copy example copies plain source text. Copying an example does not execute it and does not insert your secret.
Set AGENTPASS_API_KEY and AGENTPASS_BASE_URL on your server. The base URL is your AgentPass origin followed by /api/v1. Query the model catalog, then choose an enabled model permitted by your key. The API reference covers requests, streaming, and errors.
Search by key name or masked prefix. All, Active, and Inactive filters combine with the search. Inactive includes expired and revoked keys.
Each card shows spending, lifetime budget, request count, and expiry. Select View details to inspect permissions, allowed models, rate limit, pending credit, and timestamps. Last inference refers to a completion request, not a model-list lookup. The request history lists the latest 50 API requests with status, model, tokens, and cost.
Key settings cannot be edited after creation. Create a replacement with the required restrictions, update your server, verify its access, and then revoke the previous key.
Revocation requires confirmation and is permanent. It blocks new requests; already-reserved requests can complete and settle their charges. Revoking a key does not remove wallet credit or delete its usage history.