API Key Manager

Generate, validate, and rotate API keys with scoping, expiration, and grace periods. Zero dependencies.

Part of the API Launchpad toolkit by CodeVault.

Features

• Cryptographically secure key generation with secrets.token_hex()
• Custom prefixes: sk_live_, ak_, api_ — match your brand
• HMAC-SHA256 validation with timing-safe comparison (never stores plaintext)
• Scope-based permissions: read, write, admin, or custom scopes like read:users
• Key expiration with configurable TTL (default: 90 days)
• Key rotation with grace periods — old key still works during transition
• Usage tracking: last used timestamp and request count per key
• CLI tool for key management (generate, list, validate, rotate, revoke)
• Zero dependencies — runs on Python stdlib only