ReqKey

About ReqKey

ReqKey is an API key management and monitoring platform that provides authentication, usage metering, rate limiting, and traffic analytics through an SDK integrated directly into a developer's own API middleware, rather than operating as a proxy or gateway. The SDK exposes a verify() call that checks a key's validity, deducts credits, and logs the request, with configurable fail-open or fail-closed behavior if the service is unavailable. SDKs are available for Python, Node.js, Go, Rust, PHP, .NET, and Java, with framework-specific middleware for tools such as FastAPI, Express, Next.js, Gin, Laravel, and Spring Boot.

The platform includes a dashboard for managing consumers, plans, keys, and traffic. Consumers can be assigned plans with credit limits, trial periods, and automatic monthly, quarterly, or yearly renewals; credits and rate limits are synced across regions so usage from a single consumer is not double-counted. Keys can be issued, scoped to specific APIs, suspended, rerolled, or revoked without a redeploy, and all key, plan, and credit changes are recorded in an audit trail with consumer, region, and IP information. Traffic monitoring logs method, endpoint, status code, latency, and client IP for each request, with error-rate and latency trends viewable over configurable time windows, and alerts can be configured for events such as low credits or plan changes.

ReqKey is intended for developers building or operating APIs who need to charge for access, gate access for customers or internal services, or prevent abuse from scrapers and runaway clients. Data capture of request bodies, headers, and client IP is opt-in, and API keys and credentials are excluded from logs. Pricing is based on request volume: a Free plan includes 100,000 requests per month, a Pro plan at $20/month includes 2 million requests with additional usage billed at $25 per million, and an Enterprise plan offers custom terms for high-volume platforms.

Key features

• In-code SDK key validation with no proxy or DNS changes
• Per-consumer credit pools with rate limits and controlled overage
• Real-time traffic analytics with request/response logging and audit trail
• Region-synced credits and limits across multiple regions
• Instant key issue, suspend, reroll, and revoke without a deploy
• Alerts on low credits, new consumers, or plan changes

Frequently asked questions