AI Gateway · API Keys

API Keys

Create, list, and revoke the NevTan API keys your code sends to the gateway — the credential behind `Authorization: Bearer nvt-live-...`.

A NevTan API key is the credential your application sends to the gateway. You authenticate every call with it — Authorization: Bearer nvt-live-... — and the gateway then uses your stored BYOK key to reach the upstream provider. Create and revoke keys on the API Keys screen.

Two different keys

Your NevTan API key (nvt-live-...) is what your code sends to the gateway. Your provider (BYOK) key (like sk-ant-...) is stored once under Bring Your Own Key and used by the gateway on your behalf — your code never sends it.

Create a key

1
Open API Keys
In the AI Gateway, open API Keys and click Create Key.
2
Name it
Give the key a descriptive name (e.g. Production app) so you can tell your keys apart later. Left blank, it is named Gateway key.
3
Choose an environment
Pick Live for real traffic, or Test for experiments and non-production use.
4
Copy it now
The full key is shown once, right after creation. Copy it somewhere safe before closing the dialog — it is never displayed again.
bash
```
 
```

Create-key fields

Parameter	Type	Description
`name`	string	Display label for the key. Defaults to `Gateway key` if left blank.
`environment`	string	`live` (default) or `test`. Test keys are for non-production use and are labelled Test in the list.

Manage keys

Base: https://api.cloud.nevtan.com/api/v1

GET/api-keysList your keys (masked — only a preview like `nvt-live-…9f2c` is returned).

POST/api-keysCreate a key. The full value is returned once, in this response only.

DELETE/api-keys/{id}Revoke a key immediately.

bash

The key list

The API Keys table shows each key by name, a masked key preview, its environment (Live or Test), and when it was created. Use the revoke action on any row to disable that key at once.

The API Keys page showing the key table and Create Key button — Your keys by name, masked value, environment, and creation date — with Create Key top-right.

The Create API key dialog with Name and Environment fields — Name the key and pick Live or Test.

The Key created dialog showing the full key once with a copy button — The full key is shown once here — copy it before closing.

Shown once

The full key value appears only at creation and is never shown again. If you lose it, revoke it and create a new one. Revoking takes effect immediately — there is no grace period, so put the replacement in place first for a planned rotation.

Tip

For rotation strategy, scoping, and what to do about a leaked credential, see API keys under Security.

Quick start

Create a key and make your first gateway call in three steps.

Bring Your Own Key

Add the provider credential the gateway uses on your behalf.

API reference

Use your key against the OpenAI-compatible chat endpoint.

Security · API keys

Rotation, revocation, and handling a leaked key.