AltLLM Portal API Keys

Portal API key lifecycle management for the local altllm CLI.

Shared Setup

Before the first altllm command in a fresh checkout, read and follow:

• ../_shared/preflight.md
• ../_shared/session-and-target.md

Command Index

Command	Purpose
list-api-keys	List active and disabled keys
create-api-key	Create a new key, optionally with a model allowlist
get-api-key	Inspect one key
update-api-key	Rename a key, change status, or replace the model allowlist
revoke-api-key	Permanently revoke a key

Rules

• create-api-key returns the full key only once.
• If no model allowlist is passed, the Portal API applies its default AltLLM model set.
• Key permissions narrow accessible models, but gateway balance and tier checks still apply.
• Flex users can allowlist normal AltLLM models and Flex-only altllm-flex-* models; backend access checks remain authoritative.
• update-api-key --status disabled is reversible.
• revoke-api-key is permanent.
• keys is an alias for list-api-keys.

Known Production Limitation

• The single-key Portal API routes are currently broken in production.
• Affected commands:
  • get-api-key
  • update-api-key
  • revoke-api-key
• Commands that still work:
  • list-api-keys
  • create-api-key
• Do not create temporary production smoke keys unless revoke-api-key is healthy or an approved cleanup path exists.

Reference

See references/cli-reference.md for command examples and representative responses.