Gateway
Caller keys
Console → Keys: the keys your apps and agents use to call the gateway. On pikeway these are the same pk-… keys you use for the marketplace.
APIsAll APIs, or only the ones you pick. Calling another one answers 403.
budgetsCalls or cost per day, week, month or a number of days. When used up the key gets 429 until the window resets.
IP allowlistOnly these IPs or ranges may use the key (hosted).
websitesFor keys used in a browser: only these origins (wildcards like *.example.com) (hosted).
spending capThe most this key may spend on marketplace calls (hosted).
expiresAfter this date the key stops working.
Rotate and disable
Rotate gives a new secret that works at once; the old one keeps working for the grace period you choose, so callers can switch without downtime. Disable stops a key immediately without deleting it.
The full key is shown once when it is created; afterwards only a preview.