# ReqKey

**Canonical:** https://apis.io/providers/reqkey/  
**Website:** https://www.reqkey.com  
**APIs profiled:** 1

ReqKey is out-of-band API key authentication, usage credits, rate limiting and request analytics as a service for teams that sell or expose an API. It never sits in front of customer traffic: your own middleware makes one call to POST /key/validate per request, which checks the key, deducts a credit from that customer's pool and records the decision, typically in under 5ms over a reused connection. The defining design choice is that credits and rate limits live on the CONSUMER rather than the key, so issuing a customer fifty keys never multiplies their plan into fifty quotas and disabling a consumer stops all of its keys at once. Validation is Redis-backed and runs in multiple AWS regions with a global sync layer reconciling credit balances. A second endpoint, POST /ingest, correlates full request/response logs to a validation by requestId and feeds an Analytics API over two datasets. Seven first-party SDKs wrap both calls as framework middleware.

## Kin Score — 38.4 / 100 (thin)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 38.4).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 0.0 |
| Governance | 3.1 |
| Operational Transparency | 36.8 |
| Developer Ergonomics | 52.2 |
| Commercial Clarity | 76.3 |

## Agent readiness — 18.5 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| MCP Server | derived |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## APIs (1)

- **ReqKey REST API** — REST API for API key management, usage credits/metering, rate limiting, and traffic analytics. POST/JSON endpoints authenticated with a project root key via Bearer token; single...

## MCP servers (1)

- **reqkey-mcp.yml**

## Security (3)

- **Reqkey Authentication** — http · 1 scheme
- **Reqkey Domain Security** — TLSv1.3 · HSTS · DMARC
- **Reqkey Vulnerability Disclosure** — security.txt · contact published

## Plans (1)

- **Reqkey Plans**

## Tags

api-keys, authentication, authorization, rate-limiting, usage-metering, api-analytics, api-management, developer-tools, middleware, observability

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/reqkey/). Scores are computed from the provider's own public artifacts under a published rubric.