API Keys | OpenDunes Docs

API keys authenticate every request to the OpenDunes API. Keys look like sk- followed by a hex string — they are shown once at creation; only a hash is stored on our servers. A default key is created automatically when you sign up.

Programmatic key management goes through the management API at /v1/management/keys. It authenticates with a management key (mk-…) — a separate credential from your inference keys, created at Settings → Management Keys. For interactive management, use the Keys page.

The openai SDK has no keys resource, so call the endpoints directly with httpx.

List keys#

Python

import os
import httpx

headers = {"Authorization": f"Bearer {os.environ['OPENDUNES_MANAGEMENT_KEY']}"}

resp = httpx.get("https://opendunes.com/api/v1/management/keys", headers=headers)
keys = resp.json()["data"]
# [{ "id", "name", "key_prefix", "status", "created_at" }, ...] — metadata only

Create a key#

Python

resp = httpx.post(
    "https://opendunes.com/api/v1/management/keys",
    headers=headers,
    json={
        "name": "production-backend",
        "rate_limit_rpm": 120,  # optional per-key limit
        "allowed_models": ["anthropic/claude-sonnet-5"],  # optional allowlist
    },
)
data = resp.json()
raw_key = data["raw_key"]  # returned ONCE — store it in your secret manager now

Revoke a key#

Python

httpx.delete(
    f"https://opendunes.com/api/v1/management/keys/{key_id}",
    headers=headers,
)
# → { "revoked": true }

There is no update operation — rotate by creating a new key and revoking the old one.

Also see#

The openai SDK has no keys resource, so call the endpoints directly with httpx.

List keys#

Python

import os
import httpx

headers = {"Authorization": f"Bearer {os.environ['OPENDUNES_MANAGEMENT_KEY']}"}

resp = httpx.get("https://opendunes.com/api/v1/management/keys", headers=headers)
keys = resp.json()["data"]
# [{ "id", "name", "key_prefix", "status", "created_at" }, ...] — metadata only

Create a key#

Python

resp = httpx.post(
    "https://opendunes.com/api/v1/management/keys",
    headers=headers,
    json={
        "name": "production-backend",
        "rate_limit_rpm": 120,  # optional per-key limit
        "allowed_models": ["anthropic/claude-sonnet-5"],  # optional allowlist
    },
)
data = resp.json()
raw_key = data["raw_key"]  # returned ONCE — store it in your secret manager now

Revoke a key#

Python

httpx.delete(
    f"https://opendunes.com/api/v1/management/keys/{key_id}",
    headers=headers,
)
# → { "revoked": true }

There is no update operation — rotate by creating a new key and revoking the old one.