Open-model authentication

Get a key

Coding plan and Credits only

A serving retired plan covers chat (chat completions, messages and responses) from every workspace key except keys marked Credits only, and embeddings and rerank whenever those models are available.

An owner can set Credits only at Settings > API keys. The setting is off by default and survives rotation. It bypasses the coding plan, Standby, and the credits cap after plan limits. Normal wallet and key controls still apply.

On a serving coding plan, a per-key spending limit blocks credits after plan limits. It does not stop requests paid by the plan or eligible Standby usage. Use Credits only when a key must always follow pay-as-you-go credit controls. See Coding plan.

Send it

curl https://api.runinfra.ai/v1/chat/completions \
  -H "Authorization: Bearer $RUNINFRA_GATEWAY_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "MODEL_ID",
    "messages": [{"role": "user", "content": "Hello"}]
  }'

Key format

Every key is rp_ followed by 40 lowercase letters or digits.

rp_abcdefghijklmnopqrstuvwxyz0123456789abcd
└┬┘└──────────── 40 chars, a-z and 0-9 ───┘
prefix

The stored digest and encrypted copy both depend on a secret held outside the database, so a copy of the database alone cannot reveal a usable key. Revoking a key erases its encrypted copy. If Settings marks a key as an older format, rotate it from that row and the replacement uses the current one.

Workspace keys

Use a workspace-scoped key with https://api.runinfra.ai/v1 and select a hosted model with the model field.

A legacy key scoped to one deployment returns 400 auth_error here. Replace it with a workspace key.

Rotate, revoke, expire

Rotation keeps the previous key working for up to 24 hours by default, or until its own expiry if that comes sooner, and Revoke ends that grace period. For no downtime, choose Rotate from the key's row menu with Revoke previous key immediately clear, deploy the new key, let traffic drain, then choose Revoke on the previous key. Check Revoke previous key immediately when the previous key must stop at once.

To revoke or delete several keys at once, tick them in Settings > API keys, or tick the box above the list to select them all, then choose Revoke or Delete. A revoked key cannot be turned back on. Delete revokes a key that is still active first, and its usage history stays.

Branch on codes, never on message text: the 401 and 403 carry error.type and error.code, the 400 and 503 key operations a top-level code. During a rate-limit store outage, a revoked key can keep working for up to about 30 seconds. A rotation also revokes the earlier keys in its own rotation history that are still live; other older keys stay live and count toward the 20. Expiration is checked on every request, so an expired key stops working the moment it expires.

Environment variables

export RUNINFRA_GATEWAY_KEY=rp_...
export RUNINFRA_API_KEY=$RUNINFRA_GATEWAY_KEY
export RUNINFRA_BASE_URL=https://api.runinfra.ai/v1
export OPENAI_API_KEY=$RUNINFRA_GATEWAY_KEY
export OPENAI_BASE_URL=$RUNINFRA_BASE_URL
export ANTHROPIC_BASE_URL=https://api.runinfra.ai
export ANTHROPIC_AUTH_TOKEN=$RUNINFRA_GATEWAY_KEY

RUNINFRA_API_KEY is the name the open models CLI and most coding-agent integrations read. Mistral Vibe, Oh My Pi and Goose read their own variable instead, such as RUNINFRA_GOOSE_API_KEY, and so does Crush set up with --key-source env; setup writes it for you. It is not an alias for RUNINFRA_GATEWAY_KEY, so set both, as the block above does.

Most clients compatible with this chat-completions protocol pick up OPENAI_API_KEY on their own, so the block above maps it, with OPENAI_BASE_URL, to the open-models service. Messages protocol clients use the bare host because they append /v1. ANTHROPIC_AUTH_TOKEN sends Bearer auth. ANTHROPIC_API_KEY also works through x-api-key on the Messages routes and GET /v1/models. Use a separate key per environment so one leak has a bounded blast radius.

Security posture

These key-handling and security statements describe the open-models service.

Related