Operator console for the loxal platform. First tool: API key management — issue, revoke, and inspect metered API keys against the live metering store.
Use the dedicated admin secret
(API_ADMIN_CONSOLE_SECRET) — not a workspace secret and not an API key. This
console can mint and revoke uncapped keys; the secret is held only in page memory until
logout or reload, never in storage or the URL, and every action re-sends it.
Hand this to the customer over a secure channel. Only the salted hash is stored — after a refresh, logout, or reload the plaintext is gone for good.
| Status | Plan | Key hash | Created | Usage | Actions | |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Revocation is a soft delete — the record stays for audit. Revoke is a two-click action: the first click arms the button, the second one revokes.
| When | Action | Target | Actor |
|---|---|---|---|
| Loading… | |||
Every issue and revoke is audit-logged server-side
(api:adminaudit:*) with actor IP and timestamp.