API Key Manager

DevOps & Security

api-key-manager

API Key Manager is an Agent Skill for devops & security published in the a5c-ai/babysitter repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

API key generation, rotation, and management system

View on GitHub ↗

QUICK START

How to use this skill

Bring this guide into your coding agent with a prompt tailored to the tool you use.

Open your project in Codex.
Copy and paste the prompt below.
Review files and risks before approving any action.

Prompt to paste

Inspect the Agent Skill at https://github.com/a5c-ai/babysitter/blob/HEAD/library/specializations/sdk-platform-development/skills/api-key-manager/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/api-key-manager, but wait for my approval before writing files or running scripts.

Copying this prompt does not install or run the skill. Review third-party files before use.

API Key Manager Skill

Overview

This skill implements comprehensive API key management including secure generation, rotation policies, usage tracking, and quota enforcement.

Capabilities

Generate cryptographically secure API keys
Implement key rotation with grace periods
Track key usage and enforce quotas
Support key scoping and permissions
Configure key prefix patterns for identification
Implement key revocation and blacklisting
Support multiple key types (test, live)
Generate key hashes for secure storage

Target Processes

Authentication and Authorization Patterns
Developer Portal Implementation
Platform API Gateway Design

Integration Points

Key management systems (HashiCorp Vault)
Rate limiting middleware
Usage analytics systems
Developer portal UIs
API gateway key validation

Input Requirements

Key format requirements
Scoping/permission model
Rotation policy
Quota definitions
Storage security requirements

Output Artifacts

Key generation service
Key validation middleware
Rotation management system
Usage tracking integration
Quota enforcement rules
Admin management API

Usage Example

skill:
  name: api-key-manager
  context:
    keyFormat:
      prefix: "sk_"
      testPrefix: "sk_test_"
      livePrefix: "sk_live_"
      length: 32
    rotation:
      enabled: true
      gracePeriod: "7d"
    scopes:
      - read
      - write
      - delete
    quotas:
      default: 1000
      premium: 10000

Best Practices

Use cryptographically secure random generation
Prefix keys to indicate type (test/live)
Store only hashed keys in database
Implement rotation with overlap periods
Track usage per key for analytics
Support immediate revocation