Account & API Keys

An API key represents access to your account. Give each application its own key to make usage tracking, rotation and incident response easier.

Create a key

1. Sign in to Flex247.
2. Open API Keys.
3. Choose a descriptive name such as MacBook-Codex or Production-Store.
4. Set the group, model restrictions and quota when required.
5. Create the key and store the complete value immediately.

Authentication headers

OpenAI Compatible requests use a Bearer token:

Authorization: Bearer sk-your-flex247-key

Anthropic Protocol requests can use:

x-api-key: sk-your-flex247-key

Recommended practices

• Use different keys for development, staging and production.
• Never embed keys in browser code, mobile apps or public repositories.
• Load keys through environment variables or a server-side secret manager.
• Disable a suspicious key before creating its replacement.
• Review Usage Logs to verify models, token usage and charges.

Rotate a key without downtime

1. Create a replacement key.
2. Update the application.
3. Send a test request and check its usage log.
4. Disable the old key only after its traffic has stopped.

Teams and devices

Avoid sharing one key across people or services. Per-user and per-service keys make ownership and troubleshooting clear.