ReqKey

ReqKey is out-of-band API key authentication, usage credits, rate limiting and request analytics as a service for teams that sell or expose an API. It never sits in front of customer traffic: your own middleware makes one call to POST /key/validate per request, which checks the key, deducts a credit from that customer's pool and records the decision, typically in under 5ms over a reused connection. The defining design choice is that credits and rate limits live on the CONSUMER rather than the key, so issuing a customer fifty keys never multiplies their plan into fifty quotas and disabling a consumer stops all of its keys at once. Validation is Redis-backed and runs in multiple AWS regions with a global sync layer reconciling credit balances. A second endpoint, POST /ingest, correlates full request/response logs to a validation by requestId and feeds an Analytics API over two datasets. Seven first-party SDKs wrap both calls as framework middleware.

ReqKey publishes 1 API on the APIs.io network. Tagged areas include api-keys, authentication, authorization, rate-limiting, and usage-metering.

ReqKey’s developer surface includes authentication, documentation, API reference, getting-started guide, support, engineering blog, pricing, and 20 more developer resources.

🌐 Visit website 📡 Source on GitHub
38.4/100 thin ▬ flat Agent 19/100 agent aware Full breakdown ↓
scored 2026-08-17 · rubric v0.11.0
1 APIs 1 MCP Servers
api-keysauthenticationauthorizationrate-limitingusage-meteringapi-analyticsapi-managementdeveloper-toolsmiddlewareobservability

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-17 · rubric v0.11.0
Composite quality — 38.4/100 · thin
Contract Quality 0.0 / 25
Developer Ergonomics 10.4 / 20
Commercial Clarity 15.3 / 20
Operational Transparency 4.8 / 13
Governance 0.4 / 12
Discoverability 7.6 / 10
Agent readiness — 19/100 · agent aware
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/reqkey: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

ReqKey REST API

REST API for API key management, usage credits/metering, rate limiting, and traffic analytics. POST/JSON endpoints authenticated with a project root key via Bearer token; single...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

reqkey-mcp.yml

MCP SERVER

Pricing Plans 1

Published pricing tiers and plan structures.

Reqkey Plans

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Reqkey Rate Limits

6 limits

RATE LIMITS

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Reqkey Authentication

http · 1 scheme

SECURITY

Reqkey Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Reqkey Vulnerability Disclosure

security.txt · contact published

SECURITY

Resources

Get Started 3

Portal, sign-up, and the first successful call

GettingStarted
GettingStarted
 SignUp
SignUp
 Login
Login

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

MCPServer
MCPServer
 LLMsTxt
LLMsTxt

Design & Contract 5

Pagination, idempotency, versioning, errors, and events

ErrorCatalog
ErrorCatalog
 Conventions
Conventions
 Conformance
Conformance
 Lifecycle
Lifecycle
 DataModel
DataModel

Build 3

SDKs, sample code, and the tooling you integrate with

Packages
Packages
 SDKs
SDKs
 GitHubOrganization
GitHubOrganization

Access & Security 3

Authentication, authorization, and security posture

DomainSecurity
DomainSecurity
 VulnerabilityDisclosure
VulnerabilityDisclosure
 Authentication
Authentication

Operate 2

Status, limits, changes, and where to get help

RateLimits
RateLimits
 Support
Support

Commercial 4

Pricing, plans, and the legal terms of use

Plans
Plans
 Pricing
Pricing
 TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 3

The organization behind the API

Blog
Blog
 Website
Website
 LinkedIn
LinkedIn

Source (apis.yml)

apis.yml Raw ↑ 
name: ReqKey
description: 'ReqKey is out-of-band API key authentication, usage credits, rate limiting and request analytics as a service
  for teams that sell or expose an API. It never sits in front of customer traffic: your own middleware makes one call to
  POST /key/validate per request, which checks the key, deducts a credit from that customer''s pool and records the decision,
  typically in under 5ms over a reused connection. The defining design choice is that credits and rate limits live on the
  CONSUMER rather than the key, so issuing a customer fifty keys never multiplies their plan into fifty quotas and disabling
  a consumer stops all of its keys at once. Validation is Redis-backed and runs in multiple AWS regions with a global sync
  layer reconciling credit balances. A second endpoint, POST /ingest, correlates full request/response logs to a validation
  by requestId and feeds an Analytics API over two datasets. Seven first-party SDKs wrap both calls as framework middleware.'
url: https://reqkey.apievangelist.com/apis.yml
image: https://www.reqkey.com/og-image.png
created: '2026-07-26'
modified: '2026-08-09'
specificationVersion: '0.21'
tags:
- api-keys
- authentication
- authorization
- rate-limiting
- usage-metering
- api-analytics
- api-management
- developer-tools
- middleware
- observability
apis:
- name: ReqKey REST API
  description: REST API for API key management, usage credits/metering, rate limiting, and traffic analytics. POST/JSON endpoints
    authenticated with a project root key via Bearer token; single unauthenticated GET /health.
  humanURL: https://www.reqkey.com/docs
  baseURL: https://api.reqkey.com
  tags:
  - api-keys
  - authentication
  - authorization
  - rate-limiting
  - usage-metering
  - api-analytics
  - api-management
  - developer-tools
  - middleware
  - observability
  properties:
  - type: Documentation
    url: https://www.reqkey.com/docs
  - type: LLMSTxt
    url: https://www.reqkey.com/llms.txt
maintainers:
- FN: ReqKey Support
  email: support@reqkey.com
  url: mailto:support@reqkey.com
generated:
  by: apis.io/add
  model: claude-opus-4-8
  confidence: 90
  at: '2026-07-26T12:34:37.893Z'
x-enrichment:
  date: '2026-08-09'
  status: enriched
  artifacts_added: 14
  pass: local-v1
  contract_discovery:
    openapi: not-published
    graphql: not-published
    asyncapi: not-published
    mcp: not-published
    agent_card: not-published
    postman: not-published
    note: Probed /openapi.json, /openapi.yaml, /swagger.json, /v1/openapi.json, /api-docs, /docs, /redoc on api.reqkey.com
      and www.reqkey.com (all 404), every /.well-known/ path on all three hosts (all 404), mcp.reqkey.com (no DNS), and the
      full recursive file tree of all seven github.com/Req-Key SDK repositories. ReqKey's machine-readable surface is a 26KB
      llms.txt and nothing else; the API reference is complete, server-rendered HTML with no spec behind it.
common:
- type: MCPServer
  url: mcp/reqkey-mcp.yml
- type: DomainSecurity
  url: security/reqkey-domain-security.yml
- type: VulnerabilityDisclosure
  url: security/reqkey-vulnerability-disclosure.yml
- type: Authentication
  url: authentication/reqkey-authentication.yml
- type: ErrorCatalog
  url: errors/reqkey-problem-types.yml
- type: Conventions
  url: conventions/reqkey-conventions.yml
- type: Conformance
  url: conformance/reqkey-conformance.yml
- type: Lifecycle
  url: lifecycle/reqkey-lifecycle.yml
- type: DataModel
  url: data-model/reqkey-data-model.yml
- type: RateLimits
  url: rate-limits/reqkey-rate-limits.yml
- type: Plans
  url: plans/reqkey-plans.yml
- type: Packages
  url: packages/reqkey-packages.yml
- type: SDKs
  url: packages/reqkey-packages.yml
- type: LLMsTxt
  url: llms/reqkey-llms.txt
- type: Documentation
  url: https://www.reqkey.com/docs
- type: APIReference
  url: https://www.reqkey.com/docs/api/keys
- type: GettingStarted
  url: https://www.reqkey.com/docs/how-it-works
- type: Support
  url: https://www.reqkey.com/contact
- type: Blog
  url: https://www.reqkey.com/blog
- type: GitHubOrganization
  url: https://github.com/Req-Key
- type: Pricing
  url: https://www.reqkey.com/pricing
- type: SignUp
  url: https://www.reqkey.com/sign-in?mode=signup
- type: Login
  url: https://www.reqkey.com/sign-in
- type: TermsOfService
  url: https://www.reqkey.com/legal/terms
- type: PrivacyPolicy
  url: https://www.reqkey.com/legal/privacy
- type: Website
  url: https://www.reqkey.com
- type: LinkedIn
  url: https://www.linkedin.com/company/reqkey