API Keys

Create, manage, and revoke Tolka Edge API keys to authenticate your requests.

Create, manage, and revoke Tolka Edge API keys from the dashboard. API keys authenticate requests to the Tolka API. Keep them private and store them securely.

Create an API key

1. Open the dashboard

Go to API Keys and select Create key.

2. Name your key

Give the key a descriptive name such as:

production-backend

This helps you identify and manage keys later.

3. Copy your secret

Your API key is displayed once after creation.

Store keys securely

Copy it immediately and store it in an environment variable or secret manager. Tolka cannot recover the plaintext key after you leave the dialog.

Use your API key

Pass your key as a bearer token:

curl https://api.tolkaedge.com/v1/chat/completions \
  -H "Authorization: Bearer tk-live-xxxxxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "Qwen/Qwen3-14B",
    "messages": [
      {
        "role": "user",
        "content": "Hello from Tolka Edge."
      }
    ]
  }'

Revoke a key

You can revoke a key from the API Keys Dashboard.

Revocation takes effect immediately. Requests using the revoked key will be rejected with 401 Unauthorized.

Revoking a key does not automatically create a replacement. Create and deploy a new key before revoking the old one when rotating credentials for a production service.

Rotate a key

For a production service:

Create a new key
Deploy the new key
Verify requests are working
Revoke the old key

This allows you to rotate credentials without unnecessary downtime.

Best practices

Use separate keys for environments. Keep development and production credentials separate.
Keep keys server-side. Never expose production API keys in browser or mobile client code.
Use descriptive names. Name keys by service or environment.
Rotate exposed keys immediately. Revoke compromised keys and create a replacement.

Manage your keys

Manage your API keys from the API Keys Dashboard.