Create, list, rotate, and revoke OmniRoute API keys. Control per-key scopes, spending limits, and expiration. Keys gate access to all proxy and management endpoints.

<! generated by src/lib/agentSkills/generator.ts; manual edits will be overwritten Overview Create, list, rotate, and revoke OmniRoute API keys. Control per key scopes, spending limits, and expiration. Keys gate access to all proxy and management endpoints. Authentication All requests require a valid Bearer token or session cookie. Obtain a token via POST /api/auth/login or configure REQUIRE API KEY=false for local development. Endpoints GET /api/keys List API keys POST /api/keys Create API key GET /api/keys/{id} Get API key PATCH /api/keys/{id} Update API key DELETE /api/keys/{id} Delete API key GET /api/keys/{id}/devices List devices for an API key Lists the distinct devices (masked IP + User Agent fingerprints) tracked for an API key by the in memory device tracker. IPs are masked before storage; the route never sees the raw client IP. Payloads See the full OpenAPI specification at GET /api/openapi/spec or docs/openapi.yaml for detailed request/response schemas.

omni-api-keys