Gateway

Caller keys

Console → Keys: the keys your apps and agents use to call the gateway. On pikeway these are the same pk-… keys you use for the marketplace.

APIs
All APIs, or only the ones you pick. Calling another one answers 403.
budgets
Calls or cost per day, week, month or a number of days. When used up the key gets 429 until the window resets.
IP allowlist
Only these IPs or ranges may use the key (hosted).
websites
For keys used in a browser: only these origins (wildcards like *.example.com) (hosted).
spending cap
The most this key may spend on marketplace calls (hosted).
expires
After this date the key stops working.

Rotate and disable

Rotate gives a new secret that works at once; the old one keeps working for the grace period you choose, so callers can switch without downtime. Disable stops a key immediately without deleting it.

The full key is shown once when it is created; afterwards only a preview.