API Keys | OpenDunes Docs

API keys authenticate requests to the OpenDunes API. A default key is created automatically when you sign up; keys look like sk- followed by a hex string, and the full value is shown once at creation — only a secure hash is stored.

Programmatic key management goes through the management API at /v1/management/keys. It authenticates with a management key (mk-…) — a separate credential from your inference keys, created at Settings → Management Keys. For interactive management, use the Keys page.

The openai SDK has no keys resource, so call the endpoints directly with fetch.

List keys#

TypeScript

const res = await fetch("https://opendunes.com/api/v1/management/keys", {
  headers: { Authorization: `Bearer ${process.env.OPENDUNES_MANAGEMENT_KEY}` },
});
const { data } = await res.json();
// [{ id, name, key_prefix, status, created_at }, ...] — metadata only, never the secret

Create a key#

TypeScript

const res = await fetch("https://opendunes.com/api/v1/management/keys", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.OPENDUNES_MANAGEMENT_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    name: "production-backend",
    rate_limit_rpm: 120, // optional per-key limit
    allowed_models: ["anthropic/claude-sonnet-5"], // optional allowlist
  }),
});
const { api_key, raw_key } = await res.json();
// raw_key is returned ONCE — store it in your secret manager now

Revoke a key#

TypeScript

await fetch(`https://opendunes.com/api/v1/management/keys/${keyId}`, {
  method: "DELETE",
  headers: { Authorization: `Bearer ${process.env.OPENDUNES_MANAGEMENT_KEY}` },
});
// → { revoked: true }

There is no update operation — rotate by creating a new key and revoking the old one.

Also see#

The openai SDK has no keys resource, so call the endpoints directly with fetch.

List keys#

TypeScript

const res = await fetch("https://opendunes.com/api/v1/management/keys", {
  headers: { Authorization: `Bearer ${process.env.OPENDUNES_MANAGEMENT_KEY}` },
});
const { data } = await res.json();
// [{ id, name, key_prefix, status, created_at }, ...] — metadata only, never the secret

Create a key#

TypeScript

const res = await fetch("https://opendunes.com/api/v1/management/keys", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.OPENDUNES_MANAGEMENT_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    name: "production-backend",
    rate_limit_rpm: 120, // optional per-key limit
    allowed_models: ["anthropic/claude-sonnet-5"], // optional allowlist
  }),
});
const { api_key, raw_key } = await res.json();
// raw_key is returned ONCE — store it in your secret manager now

Revoke a key#

TypeScript

await fetch(`https://opendunes.com/api/v1/management/keys/${keyId}`, {
  method: "DELETE",
  headers: { Authorization: `Bearer ${process.env.OPENDUNES_MANAGEMENT_KEY}` },
});
// → { revoked: true }

There is no update operation — rotate by creating a new key and revoking the old one.