Authentication
Create and manage access to your workspace.
API keys
Create an application key in API keys. Send it as a bearer token. The provider credential stays on the server; use your Unrefused application key in API requests.
Authorization: Bearer YOUR_API_KEYKey controls
Keys can be scoped to supported endpoints, linked to a policy profile, assigned request and concurrency limits, and given an expiry. Review the values shown when you create a key.
Revoking a key
Revoke unused keys from the dashboard. Changes take effect after the gateway's key-cache window, which is configurable and defaults to 30 seconds.
Handle keys safely
Keep application keys in server-side environment variables. Do not bundle provider credentials into browser code. If a key is exposed, replace it and revoke the old one.
Availability depends on your connected provider. Check service status and keep x-request-id with your diagnostics.