API Keys

An API key is the credential used to call Glacier AI. Create and manage one key per use case, each with its own quota, model, group and source restrictions.

Click API Keys in the left navigation, or go to /keys. The page lists the key name, masked key, enabled state, quota usage and group, and supports filtering, copying, editing, enabling/disabling and bulk deletion. The row menu can also copy connection details, open a chat preset configured by the administrator, and send the key to a supported client integration.

Create an API key

1. Open API Keys and click Create API key.
2. Enter a key name so you can tell applications or environments apart.
3. Set quota, expiry, model restrictions, IP restrictions and group as needed.
4. After saving, view and copy the full key from the list.

Configuration options

Setting	Effect
Name	The API key name (name it after its purpose, for example “Production” or “Testing”)
Group	The channel group this key uses
Auto group order	Shown only when the group is auto. Keeps the default order, or sets the order in which groups are tried for this key
Cross-group retry	When enabled, an unavailable group falls through to the next one in order. Better availability, but prices can differ between groups
Expiry	The key is rejected after this time
Count	Create several API keys at once (a random suffix is added to the name)
Quota	Caps the quota this key can consume
Unlimited quota	When enabled, gives this API key an unlimited quota
Model restrictions	Restricts the key to the listed models. Blank means no restriction
IP allowlist	One IP or CIDR per line. Blank means no restriction. Good for servers on a fixed public IP; home and mobile connections change IP often and will lock you out

Danger

An API key is equivalent to a password. Never commit a full key to a code repository, screenshot, log file or chat tool. If you suspect it has leaked, delete it immediately and create a new one.

View and copy an API key

Click the masked key in the list and follow the prompts to view and copy the full value. The full key is a sensitive credential, so viewing it may require an extra security check.

Copy connection details copies the key and the platform address as import data for an application. Clicking a chat preset under Chat in the left sidebar makes the browser try to launch the installed chat application and fill in the configuration automatically. See Chat App Integration.

Edit an API key

Find the key in the list and click Edit on the right to change its configuration options (the key value itself cannot be changed).

Enable, disable and delete API keys

The row actions can enable, disable or delete a key, and selecting several rows allows bulk deletion. Disabling keeps the configuration and stops calls, while deletion cannot be undone.

Caution

Once you confirm deletion, the API key stops working immediately and cannot be recovered. Check the selection before deleting so you do not remove a production key by mistake.

Related pages

• Using the API & Playground: endpoint addresses, authentication and the endpoint list for calls made with a key.
• Wallet & Subscriptions: account-level balance and subscription quota, which combine with the key-level quota cap to determine what is available.
• Logs & Async Tasks: filter call records and billing details by key name.