Guides Keys and their limits

Keys and their limits

Each key carries its own spend cap, expiry and list of models, so one leaked or looping key can't drain the balance.

Moth Console's API keys page with sample data, showing the form for a new key with a $20 monthly cap, its expiry and model choices, and a preview of the new key's card — API keys in Moth Console, shown with sample data. A new key starts with a $20 cap that resets each month, and you can change it before you create the key.

Spend cap

A cap limits what one key may spend in a window that resets in UTC, each day at midnight, each week on Monday or each month on the 1st. A new key made in Moth Console starts with $20 a month, and you can raise it, lower it or clear it.

The cap counts what the key has spent in the window plus the holds still open on it. A call whose hold would pass the cap is refused with 402 before it reaches a model, and a cap of zero stops every paid call.

An example key's spend in October, against a $20 monthly cap that resets on the 1st

1 Oct, $0.42 spent this month2 Oct, $1.32 spent this month3 Oct, $1.63 spent this month4 Oct, $2.38 spent this month5 Oct, $3.48 spent this month6 Oct, $3.68 spent this month7 Oct, $3.73 spent this month8 Oct, $4.61 spent this month9 Oct, $6.16 spent this month10 Oct, $6.76 spent this month11 Oct, $7.71 spent this month12 Oct, $8.11 spent this month13 Oct, $8.21 spent this month14 Oct, $8.21 spent this month15 Oct, $10.16 spent this month16 Oct, $11.36 spent this month17 Oct, $12.16 spent this month18 Oct, $12.82 spent this month19 Oct, $13.87 spent this month20 Oct, $14.37 spent this month21 Oct, $14.67 spent this month22 Oct, $16.52 spent this month23 Oct, $17.42 spent this month24 Oct, $19.62 spent this month25 Oct, $19.68 spent this month26 Oct, $19.68 spent this month27 Oct, $19.76 spent this month28 Oct, $19.76 spent this month29 Oct, $19.81 spent this month30 Oct, $19.81 spent this month31 Oct, $19.85 spent this month

An example with made-up figures. Each call is checked on its own, so near the cap a small call can still run while larger ones get 402, and a refused call costs nothing.

Expiry

A key can expire at a date and time up to five years ahead. It stops at that moment exactly, and its calls then get 401 with the date it expired. An expired key stays in the list until you revoke it.

Allowed models

A key can be limited to between 1 and 64 models, and a call to any other model is refused with 403 naming it. Job status, model lists and usage aren't limited by the list.

How many keys

An account holds up to 20 keys. Revoking one takes effect at once, and its next call gets 401.

Usage is account-wide. Any key can read the whole account's balance, usage and activity, including a key limited to a few models, so give a key only to code you'd trust with those figures.

Manage keys in Moth Console under API keys, or through the keys endpoints with a wallet session.