API Key Manager
Implement secure API key authentication and management with generation, rotation, and usage tracking.
Usage
Describe your API authentication needs and this skill will design the key management system.
Examples
- "Design an API key system with scoped permissions"
- "Implement key rotation without breaking existing integrations"
- "Track API key usage and set per-key rate limits"
Guidelines
- Store only hashed API keys in the database, never plaintext
- Use cryptographically secure random generation for keys
- Implement key prefixes for easy identification of key type
- Support key rotation with overlap periods for smooth transitions
- Log key usage for auditing and abuse detection