API Keys & Permissions
Create and manage API keys for programmatic access to VULK.
API Keys & Permissions
VULK provides two types of API keys: Provider keys (for AI model access) and Public API keys (for the VULK API).
Public API Keys
Public API keys allow external tools and scripts to interact with the VULK API programmatically.
Creating a Key
- Go to Settings > API Keys at vulk.dev/settings/api-keys
- Scroll to Public API Keys
- Click Create API Key
- Give it a name and select permissions
- Copy the key immediately — it is only shown once
Keys start with vk_sk_ and are displayed in masked form (vk_sk_a7f9...) after creation.
Permissions
Each key can be scoped to specific operations:
| Permission | Description |
|---|---|
| projects:read | List and view project details |
| projects:write | Create and edit projects |
| deploy:write | Deploy projects to live URLs |
| export:read | Download project source code |
Rate Limits
Each API key has a configurable rate limit (10–1000 requests per minute). The default is 60 requests per minute. Rate limit headers are included in every API response:
X-RateLimit-Limit: 60
X-RateLimit-Remaining: 58
X-RateLimit-Reset: 1712073600Revoking Keys
Go to Settings > API Keys, find the key, and click Delete. Revoked keys stop working immediately.
Provider Keys (BYOM)
Provider keys let you use your own AI model accounts instead of VULK credits. This is called Bring Your Own Model (BYOM).
Supported Providers
| Provider | What You Need |
|---|---|
| OpenAI | API key from platform.openai.com |
| Anthropic (Claude) | API key from console.anthropic.com |
| Google (Gemini) | API key from aistudio.google.dev |
| DeepSeek | API key from platform.deepseek.com |
| Groq | API key from console.groq.com |
| Mistral | API key from console.mistral.ai |
| Together AI | API key from api.together.xyz |
| Fireworks | API key from fireworks.ai |
| Ollama | Local endpoint URL |
| Custom | Any OpenAI-compatible endpoint |
How BYOM Works
When you add a provider key:
- Generation requests route directly to your provider account
- No VULK credits are consumed for AI model calls
- You are billed by the provider at their rates
- Your key is encrypted with AES-256-GCM before storage
Adding a Provider Key
- Go to Settings > API Keys
- Find the provider card (e.g., OpenAI, Claude)
- Enter your API key
- Click Save — the key is validated before being stored
Provider keys are encrypted at rest using AES-256-GCM. They are never exposed in API responses or logs.