Authentication & keys

Sign in at app.keln.ai with Google, GitHub, or email + password.

API keys

• Header: Authorization: Bearer sk-keln-…
• Keys are minted in the portal (Keys), shown once, stored hashed. Revocation is immediate.
• Creating a key requires a verified email address.
• Keys belong to a workspace, your personal one or a team. Usage and spend bill to the key's workspace and are attributed per key; each key records who created it.

Per-key budgets

Cap any key's spend with a USD budget on a daily / weekly / monthly reset (the key row's Spend limit control; owner or admin in teams). A key over its budget returns 402 with "API key budget exceeded for the current period" until the period rolls over or the budget is raised; changes take effect within seconds.

Workspace balance

Workspaces are prepaid. At zero balance, requests return 402 "insufficient balance", a different message from a key that has spent its budget. Balance, top-ups, saved cards, and auto top-up live on Billing; low-balance and depleted-balance emails are automatic.

Good practice

• One key per app/environment keeps attribution and revocation per-app.
• Budget every key that leaves your laptop.
• Rotate by minting the replacement first, deploying, then revoking the old key.