Your API, only for the callers you choose.

Publishable and secret keys, scoped and expiring keys, and rate limits on every route.

Start building Read the docs

Publishablepb_pk_•••

Safe to ship in your web and mobile apps.

Goes in: Browsers and apps
Limited by: Your access rules

Secretpb_sk_•••

Full access for your servers, never for your users.

Goes in: Your servers
Limited by: What you allow

Scopedpb_sk_•••

Only the routes and addresses you name, until the day it expires.

Routes: GET /rest/v1/*
Expires: In 30 days

Rate limits per route.

Slow down abuse without writing any code.

Who changed what, and when.

Machine identitiesKeys and tokens for services and AI agents.
IP allow listsRefuse every other address.
Allowed originsSay which sites may use a key.
Revoke any timeSwitch off a key the moment you need to.

Build your app's APIs, auth
and storage in one place.

Read the docs Start building