API key creation, validation, and developer platform integration across every major stack. Open source. Zero dependencies in local mode.
New here? Start with the quickstart — you will have a protected endpoint in under 2 minutes.
Browse by section
Getting Started
Quickstart, core concepts, and the two-mode architecture.
SDKs
Python, Node.js, Java, and .NET with all framework adapters and Swagger integration.
Developer Platform
Connect to apikee.dev for usage tracking, rate limiting, fraud detection, and client management.
REST API
Full REST API at apikee.dev/api/v1 with OpenAPI explorer and raw public spec.
OpenAPI Spec
Download the public OpenAPI YAML for tooling, codegen, and contract checks.
Guides
Key rotation, scopes, Swagger injection, server mode, fraud detection, and secret management.
Examples
Runnable apps for FastAPI, Express, Spring Boot, and ASP.NET Core.
Key format
apikee_<base62(JSON)>.<base62(HMAC-SHA256)>The payload is decoded and verified locally — no network, no database, under 0.1ms.
Two modes
| Feature | Local | Server |
|---|---|---|
| Key creation | ✓ | ✓ |
| Expiry & scopes in key | ✓ | ✓ |
| Usage tracking | — | ✓ |
| Rate limiting | — | ✓ |
| Fraud detection | — | ✓ |
| Network per request | none | ~1–3 ms |
Start local. Add server_key + project_env when you need the cloud layer.