ReqKey

name: ReqKey
description: 'ReqKey is out-of-band API key authentication, usage credits, rate limiting and request analytics as a service
  for teams that sell or expose an API. It never sits in front of customer traffic: your own middleware makes one call to
  POST /key/validate per request, which checks the key, deducts a credit from that customer''s pool and records the decision,
  typically in under 5ms over a reused connection. The defining design choice is that credits and rate limits live on the
  CONSUMER rather than the key, so issuing a customer fifty keys never multiplies their plan into fifty quotas and disabling
  a consumer stops all of its keys at once. Validation is Redis-backed and runs in multiple AWS regions with a global sync
  layer reconciling credit balances. A second endpoint, POST /ingest, correlates full request/response logs to a validation
  by requestId and feeds an Analytics API over two datasets. Seven first-party SDKs wrap both calls as framework middleware.'
url: https://raw.githubusercontent.com/api-evangelist/reqkey/refs/heads/main/apis.yml
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  - rate-limits
  - security
  generated: '2026-09-03'
  method: derived
image: https://www.reqkey.com/og-image.png
created: '2026-07-26'
modified: '2026-08-09'
specificationVersion: '0.23'
tags:
- APIKeys
- Authentication
- Authorization
- Rate Limiting
- Usage Metering
- API Analytics
- API Management
- Developer Tools
- Middleware
- Observability
tags_raw:
- api-keys
- authentication
- authorization
- rate-limiting
- usage-metering
- api-analytics
- api-management
- developer-tools
- middleware
- observability
apis:
- name: ReqKey REST API
  description: REST API for API key management, usage credits/metering, rate limiting, and traffic analytics. POST/JSON endpoints
    authenticated with a project root key via Bearer token; single unauthenticated GET /health.
  humanURL: https://www.reqkey.com/docs
  baseURL: https://api.reqkey.com
  tags:
  - APIKeys
  - Authentication
  - Authorization
  - Rate Limiting
  - Usage Metering
  - API Analytics
  - API Management
  - Developer Tools
  - Middleware
  - Observability
  tags_raw:
  - api-keys
  - authentication
  - authorization
  - rate-limiting
  - usage-metering
  - api-analytics
  - api-management
  - developer-tools
  - middleware
  - observability
  properties:
  - type: Documentation
    url: https://www.reqkey.com/docs
  - type: LLMSTxt
    url: https://www.reqkey.com/llms.txt
maintainers:
- FN: ReqKey Support
  email: support@reqkey.com
  url: mailto:support@reqkey.com
generated:
  by: apis.io/add
  model: claude-opus-4-8
  confidence: 90
  at: '2026-07-26T12:34:37.893Z'
x-enrichment:
  date: '2026-08-09'
  status: enriched
  artifacts_added: 14
  pass: local-v1
  contract_discovery:
    openapi: not-published
    graphql: not-published
    asyncapi: not-published
    mcp: not-published
    agent_card: not-published
    postman: not-published
    note: Probed /openapi.json, /openapi.yaml, /swagger.json, /v1/openapi.json, /api-docs, /docs, /redoc on api.reqkey.com
      and www.reqkey.com (all 404), every /.well-known/ path on all three hosts (all 404), mcp.reqkey.com (no DNS), and the
      full recursive file tree of all seven github.com/Req-Key SDK repositories. ReqKey's machine-readable surface is a 26KB
      llms.txt and nothing else; the API reference is complete, server-rendered HTML with no spec behind it.
common:
- type: X-MCPServerCandidate
  url: mcp/reqkey-mcp.yml
  note: 'Renamed from MCPServer 2026-09-03 (roadmap#247): the manifest self-describes as status: candidate — a tool list derived
    from the published API contracts, not an existing server. The scorer already read the manifest and reported mcp_server
    correctly; the MCPServer type was crediting the artifact-type surfaces with a server that does not exist.'
- type: DomainSecurity
  url: security/reqkey-domain-security.yml
- type: VulnerabilityDisclosure
  url: security/reqkey-vulnerability-disclosure.yml
- type: Authentication
  url: authentication/reqkey-authentication.yml
- type: ErrorCatalog
  url: errors/reqkey-problem-types.yml
- type: Conventions
  url: conventions/reqkey-conventions.yml
- type: Conformance
  url: conformance/reqkey-conformance.yml
- type: Lifecycle
  url: lifecycle/reqkey-lifecycle.yml
- type: DataModel
  url: data-model/reqkey-data-model.yml
- type: RateLimits
  url: rate-limits/reqkey-rate-limits.yml
- type: Plans
  url: plans/reqkey-plans.yml
- type: Packages
  url: packages/reqkey-packages.yml
- type: SDKs
  url: packages/reqkey-packages.yml
- type: LLMsTxt
  url: llms/reqkey-llms.txt
- type: Documentation
  url: https://www.reqkey.com/docs
- type: APIReference
  url: https://www.reqkey.com/docs/api/keys
- type: GettingStarted
  url: https://www.reqkey.com/docs/how-it-works
- type: Support
  url: https://www.reqkey.com/contact
- type: Blog
  url: https://www.reqkey.com/blog
- type: GitHubOrganization
  url: https://github.com/Req-Key
- type: Pricing
  url: https://www.reqkey.com/pricing
- type: SignUp
  url: https://www.reqkey.com/sign-in?mode=signup
- type: Login
  url: https://www.reqkey.com/sign-in
- type: TermsOfService
  url: https://www.reqkey.com/legal/terms
- type: PrivacyPolicy
  url: https://www.reqkey.com/legal/privacy
- type: Website
  url: https://www.reqkey.com
- type: LinkedIn
  url: https://www.linkedin.com/company/reqkey