Mokhtar Eddarhri

Building Vallkey: API keys with rules

About

I'm building Vallkey. Your app gets a stand-in API key instead of the real one, with rules for spending, endpoints and models, and you can shut it off in one click. Happy to talk about API keys, security and developer tools.

Links

GitHub

Vallkey

Docs

npm

Badges

Tastemaker

Veteran

Gone streaking

Maker History

VallkeySpending caps and a kill switch for every API key
Nov 2026

🎉

Joined Product HuntSeptember 27th, 2021

Forums

•

4h ago

Vallkey - Spending caps and a kill switch for every API key

A leaked API key can run up a huge bill before you notice. Vallkey keeps your real keys out of your code and gives each app a stand-in key with its own rules: spending caps, AI budgets, allowed endpoints and models. If a key leaks, it can only do what you allowed. See every request, get told when a key shows up somewhere new, and kill any key in one click without touching the real one. Works with 196+ services, including Stripe, OpenAI and Anthropic.