API Keys
API keys allow you to authenticate requests to the Vonative API without using a session-based login. They are ideal for server-to-server integrations, automation, and CI/CD pipelines.
Creating an API Key
- Log in to the Vonative Dashboard
- Navigate to DEVELOPER → API Keys
- Click Create API Key
- Give it a descriptive name (e.g., “Production”, “Staging”, “CI Pipeline”)
- Click Create
- Copy the key immediately — it’s shown only once
Managing API Keys
Viewing Keys
The API Keys page shows all your keys with their names, creation dates, and last used timestamps. The full key is never displayed after creation — only the first few characters are shown for identification.
Revoking a Key
- Go to DEVELOPER → API Keys
- Find the key you want to revoke
- Click Revoke
- Confirm the action
Revoked keys are immediately invalidated. Any services using the key will receive 401 Unauthorized responses.
Deleting a Key
Deleting a key is a hard delete. Unlike revocation, the key record is removed entirely.
Usage Limits
- 100 requests per minute per API key
- Keys are scoped to your organization
- API key usage is logged and visible in the Request Logs
API Key Security
API keys grant full access to your organization’s resources. Treat them like passwords.
- Never hardcode keys in source code
- Never commit keys to version control
- Never expose keys in client-side JavaScript
- Use environment variables or a vault service instead
- Rotate keys every 90 days
- Use separate keys for each environment
Key Prefixes
Keys issued after migration use the sk_vlang_ prefix:
Legacy keys use the key_ prefix:
Both formats are valid and work identically.
What You Can Do with API Keys
API keys provide access to all major Vonative resources:
Monitoring API Key Usage
The dashboard shows:
- Last used — timestamp of the most recent request
- Request count — total requests made with this key
- Usage logs — detailed per-request logs
Access usage data from DEVELOPER → API Keys and click on any key.
