Key management
- What it does
- Create, rotate and revoke API keys in the panel.
- How it works
- A key is shown exactly once at creation; only its SHA-256 hash is stored.
- Problem solved
- A leaked key staying in use unnoticed.
- Technical detail
- Header: x-api-key: gyi_… or Authorization: Bearer gyi_… · active key limit per plan.