API keys
Create, reveal once, disable, and revoke Tokener.ai API keys.
Tokener.ai API keys authenticate requests to https://api.tokener.ai/v1. Keys belong to your organization and spend against its prepaid credit balance.
Create a key
- Open API keys in the console.
- Name the key for an app or environment (for example
prod-web). - Create the key and copy the secret immediately.
The full secret is shown once. Tokener stores a hash, not the plaintext.
Use a key
Send the secret as a Bearer token:
Authorization: Bearer sk-...Disable or revoke
Disable a key to stop traffic without deleting the record. Revoke when the secret may be exposed. Disabled and revoked keys are rejected by the gateway.
Best practices
- One key per app or environment
- Rotate on a schedule and after staff changes
- Never commit keys to git or ship them to browsers