Token Management

A token is also called an API key. Each token can be assigned to one application, environment, or script so you can track usage and control risk independently.

Create a Token

Follow these steps:

1. Open token management in the dashboard.
2. Select the option to create a token.
3. Enter an identifiable name such as prod-api, staging, or local-dev.
4. Set the quota, expiration time, and optional restrictions.
5. Save and copy the token value into secure secret storage.

Recommended Names

Use names that describe the purpose:

Use case	Example name
Production backend	prod-backend
Test environment	staging-api
Local development	local-dev
Temporary script	script-2026-05

Token Restrictions

If supported by the dashboard, configure:

• Budget quota: limits the maximum balance an individual token can consume.
• Expiration time: use a short validity period for temporary tokens.
• Model scope: prevents accidental use of high-cost models.
• Rate limit: prevents scripts or batch jobs from affecting production services.

Security Recommendations

• Do not commit tokens to Git.
• Do not show complete tokens in screenshots, logs, or public support tickets.
• If a token is exposed, disable it immediately and create a new one.
• Rotate tokens used by long-running services regularly.