Create an API Key

Every programmatic call to SDKMAX is authenticated with an API key — a string starting with sk-, sent as Authorization: Bearer sk-xxx.

Create one in the console

1. Log in to the console.
2. Go to the Tokens / API Keys section.
3. Click "New" and fill in:
   • Name — something identifiable, e.g. prod-backend, local-dev.
   • Quota — how much this key can consume; leave blank/unlimited to only be bound by the account's overall quota.
   • Expiry (optional) — useful for temporary keys or third-party integrations.
   • Group / model restrictions (optional) — scope the key to a group or model allowlist for cost or access isolation.
   • IP allowlist (optional) — restrict which networks can use this key.
4. Copy and store the full key immediately — for security, the complete key is typically shown only once at creation time; afterwards the list view masks it as sk-****xxxx.

Using it

curl https://api.sdkmax.com/v1/chat/completions \
  -H "Authorization: Bearer sk-your-key" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "gpt-4o",
    "messages": [{"role": "user", "content": "Hello"}]
  }'

Management tips

• Split keys by purpose — production / staging / per-business-line — so any single key can be revoked without touching the others.
• Set sensible quotas and expiry, especially for keys handed to third parties or one-off scripts.
• Rotate periodically for long-lived production keys, updating deployed environment configs alongside.
• Never embed a key in frontend/client code — keys belong in server-side environment variables or a secrets manager; browser calls should go through your own backend.
• Disable/delete immediately if leaked, and issue a replacement.

FAQ

Lost a key? There's no way to recover the plaintext — disable it in the console and create a new one.

How many keys can one account create? Depends on your account tier / platform configuration — check the console for your actual limit, or contact the platform admin for a higher cap.

Next step

With a key in hand, go to the Quickstart for your first real call, or read Making Requests for the full request contract.