API keys

We email a code before creating a key. GustKit stores a hash of the key, not the key itself.

Create an API key for the GustKit signature API. We email a code first. The full key is shown once.

Keep the key private

Put the key in a secret on your server. Do not ship it in a browser app. Revoke a key here if it leaks. Usage for the month is on GET /api/v1/usage.