# Altllm Portal API Keys

> Use this skill when the user asks to list, create, inspect, update, disable, re-enable, or revoke AltLLM Portal API keys for external agents or applications. Do NOT use for wallet login, billing history, or payment links.

- Skill: `gabrielmoreira/altllm-portal-api-keys` (Agent Skill)
- Install (CLI): `npx skillmds@latest add gabrielmoreira/altllm-portal-api-keys`
- Raw SKILL.md: https://api.skillmd.com/api/skills/gabrielmoreira/altllm-portal-api-keys/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Integrations & APIs
- Author: gabrielmoreira (https://skillmd.com/u/gabrielmoreira)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/gabrielmoreira/altllm-portal-api-keys

---


# AltLLM Portal API Keys

Portal API key lifecycle management for the local `altllm` CLI.

## Shared Setup

> Before the first `altllm` command in a fresh checkout, read and follow:
> - `../_shared/preflight.md`
> - `../_shared/session-and-target.md`

## Command Index

| Command | Purpose |
|---|---|
| `list-api-keys` | List active and disabled keys |
| `create-api-key` | Create a new key, optionally with a model allowlist |
| `get-api-key` | Inspect one key |
| `update-api-key` | Rename a key, change status, or replace the model allowlist |
| `revoke-api-key` | Permanently revoke a key |

## Rules

- `create-api-key` returns the full key only once.
- If no model allowlist is passed, the Portal API applies its default AltLLM model set.
- Key permissions narrow accessible models, but gateway balance and tier checks still apply.
- Flex users can allowlist normal AltLLM models and Flex-only `altllm-flex-*` models; backend access checks remain authoritative.
- `update-api-key --status disabled` is reversible.
- `revoke-api-key` is permanent.
- `keys` is an alias for `list-api-keys`.

## Known Production Limitation

- The single-key Portal API routes are currently broken in production.
- Affected commands:
  - `get-api-key`
  - `update-api-key`
  - `revoke-api-key`
- Commands that still work:
  - `list-api-keys`
  - `create-api-key`
- Do not create temporary production smoke keys unless `revoke-api-key` is healthy or an approved cleanup path exists.

## Reference

See [references/cli-reference.md](references/cli-reference.md) for command examples and representative responses.