Create a SingleAPI key under API Keys in the dashboard. Copy the full secret when it appears: it cannot be retrieved later. Put it in an environment variable or secret manager and use it as the OpenAI SDK api_key. A provider key stored under BYOK is a separate credential.
Limit access and spending
When creating a key, choose all enabled models or selected models. You can also set an expiry and a budget. Budgets can be one-time, daily, weekly or monthly; leaving the limit empty means unlimited. A zero budget does not mean unlimited. The dashboard shows the key's remaining budget. Weekly windows begin Monday in UTC.
You can edit a key's name, expiry, model access and budget limit. Its budget period cannot be changed after creation. Reducing a budget does not erase spending already recorded in the current window. See the API key reference for exact fields.
Rotate or revoke
Use Rotate if the secret needs replacing. Save the new secret in your application immediately: new requests using the old secret will fail. Rotation keeps the key's access settings and usage history. Use Revoke to stop new requests permanently; historical usage remains available. Create a new key if you need access again.