omni-api-keys

<!-- generated by src/lib/agentSkills/generator.ts; manual edits will be overwritten --> ## Overview Create, list, rotate, and revoke OmniRoute API keys. Control per-key scopes, spending limits, and expiration. Keys gate access to all proxy and management endpoints. ## Authentication All requests require a valid Bearer token or session cookie. Obtain a token via `POST /api/auth/login` or configure `REQUIRE_API_KEY=false` for local development. ## Endpoints ### GET /api/keys List API keys ```bash curl https://localhost:20128/api/keys \ -H "Authorization: Bearer $OMNIROUTE_TOKEN" ``` ### POST /api/keys Create API key ```bash curl -X POST https://localhost:20128/api/keys \ -H "Authorization: Bearer $OMNIROUTE_TOKEN" -H "Content-Type: application/json" \ -d '{}' ``` ### GET /api/keys/{id} Get API key ```bash curl https://localhost:20128/api/keys/{id} \ -H "Authorization: Bearer $OMNIROUTE_TOKEN" ``` ### PATCH /api/keys/{id} Update API key ```bash curl -X PATCH https://localhost:20128/api/keys/{id} \ -H "Authorization: Bearer $OMNIROUTE_TOKEN" -H "Content-Type: application/json" \ -d '{}' ``` ### DELETE /api/keys/{id} Delete API key ```bash curl -X DELETE https://localhost:20128/api/keys/{id} \ -H "Authorization: Bearer $OMNIROUTE_TOKEN" ``` ### GET /api/keys/{id}/devices List devices for an API key Lists the distinct devices (masked IP + User-Agent fingerprints) tracked for an API key by the in-memory device tracker. IPs are masked before ...