Kestrel Labs / Production / API keys
API keys
Simulated credentials · fictional keys · last sync Oct 18, 2026, 14:22 UTC
Can authenticate now
10
of 13 keys are active
8 made calls in the last 24 hours
Select a status, environment or key to jump to it in the list below.
Last 30 days
7 keys · scroll
Last 30 days
Last 30 days
Needs attention · active keys only
See all 13 findings
01
Keys
Search and filter every key, then inspect one to change its permissions, rotate, disable or revoke it. Secrets are shown once, at creation and rotation.
Status
Environment
Showing 13 of 13 keys
prod-web
Prod
••••H4PZ
Active
Support copilot
Elevated
Used just now
In 135 days
462.3K req
prod-ingest
2
Prod
••••K2VF
Active
Search and retrieval
Elevated
Used 2 min ago
In 184 days
363.9K req
finops-dashboard
Prod
••••F3MV
Active
Cost dashboards
Standard
Used 3 min ago
In 105 days
8,512 API calls
ci-review
2
Prod
••••W3JA
Active
Code review agent
Elevated
Used 9 min ago
In 11 days
474.1K req
support-staging
Stage
••••B8TN
Active
Support copilot
Elevated
Used 47 min ago
In 25 days
10.3K req
dev-tomas-laptop
Dev
••••Z5EC
Active
Code review agent
Elevated
Used 3 h ago
In 50 days
8,608 req
batch-worker
1
Prod
••••T8QB
Active
Nightly summaries
Elevated
Used 10 h ago
In 176 days
278.6K req
dev-shared
1
Dev
••••R9LU
Active
Code review agent
Admin
Used 19 h ago
In 89 days
9,733 req
terraform-admin
3
Prod
••••A7KD
Active
Platform automation
Admin
Used 3 days ago
No expiry
93 API calls
zapier-legacy
4
Prod
••••P1YH
Active
Search and retrieval
Elevated
Used on Jul 22, 2026
No expiry
No calls
Active
Production
Elevated
prod-web
Support copilot web backend.
Secret
vlr_demo_prod_••••••••H4PZ
Demo
Issued Sep 14, 2026 by Amara Osei. Shown once when created; it cannot be revealed again.
Project
Support copilot
Customer experience
Owner
AO
Created
Mar 2, 2026
by Amara Osei
Expires
Mar 2, 2027
In 135 days
Last used
Just now
Oct 18, 2026, 14:21 UTC
Secret age
34 of 90 days
Rotate within 56 days
Rate limit
6,000 / min
Per-key ceiling
Network
10.40.0.0/16
Allowed models · all
Model requests · last 30 days
Hover a day for details
Requests
462.3K
Tokens
862.32M
Cost
$4,660.66
Error rate
0.50%
Claude Sonnet 4.5
254.7K · 55%
GPT-4o
72.9K · 16%
Gemini 2.5 Flash
83.5K · 18%
DeepSeek V3
51.1K · 11%
02
Security insights
Rule-based checks on expiry, rotation age, idle keys, broad permissions and network exposure. Observations and suggestions are kept apart, and nothing here implies a leak.
Act now · Rotation age
Prod
ci-review secret is 271 days old
OBSERVED
Last rotated Jan 20, 2026. The production interval is 90 days.
SUGGESTED
Rotate with an overlap window so running services can switch without downtime.
Act now · Broad permissions
Dev
dev-shared can manage billing from development
OBSERVED
billing:write on a development key shared by Developer platform.
SUGGESTED
Remove billing:write unless this key must buy credits. Keep admin permissions on dedicated, allowlisted keys.
Review · Expiry approaching
Prod
ci-review expires in 11 days
OBSERVED
Expiry Oct 29, 2026. It served 124.2K requests in the last 7 days.
SUGGESTED
Create a replacement key with the same scopes and deploy it before the expiry date.
Review · Rotation age
Prod
prod-ingest secret is 181 days old
OBSERVED
Last rotated Apr 20, 2026. The production interval is 90 days.
SUGGESTED
Rotate with an overlap window so running services can switch without downtime.
Review · Open network access
Prod
prod-ingest accepts calls from any address
OBSERVED
Production key with inference:write and no IP allowlist.
SUGGESTED
Restrict it to the egress ranges of the services that use it.
Review · Rotation age
Prod
zapier-legacy secret is 186 days old
OBSERVED
Last rotated Apr 14, 2026. The production interval is 90 days.
SUGGESTED
Rotate with an overlap window so running services can switch without downtime.
Review · Unused credential
Prod
zapier-legacy has not been used in 87 days
OBSERVED
Last call Jul 22, 2026. Still active with inference:write.
SUGGESTED
Disable it first. If nothing breaks after a while, revoke it.
Review · Open network access
Prod
zapier-legacy accepts calls from any address
OBSERVED
Production key with inference:write and no IP allowlist.
SUGGESTED
Restrict it to the egress ranges of the services that use it.
03
Credential lifelines
Every key on one timeline: when it was created, each rotation and overlap, disabled stretches, revocation and the expiry ahead, over its weekly traffic.
— Valid secret
│ Rotation
═ Overlap
┄ Disabled
◇ Expiry
▬ Weekly traffic
Hover or focus a lifeline to read it. Select one to open the key.
04
Access matrix
Who can do what. Permissions are grouped by risk and followed by the restrictions that narrow them. Select a key to edit its access.
Hover a column to read what a permission allows.
KEY
inference:
write
embeddings:
write
models:
read
usage:
read
evals:
write
keys:
write
MODELS
NETWORK
RATE LIMIT
dev-shared
Dev
Code review agent
All 4
Any address
120/min
terraform-admin
Prod
Platform automation
No inference
203.0.113.24/32
Default
ci-review
Prod
Code review agent
All 4
10.12.8.0/22
2,400/min
prod-ingest
Prod
Search and retrieval
All 4
Any address
4,000/min
prod-web
Prod
Support copilot
All 4
10.40.0.0/16
6,000/min
batch-worker
Prod
Nightly summaries
All 4
10.60.0.0/20
1,500/min
dev-tomas-laptop
Dev
Code review agent
2 of 4
Any address
60/min
search-eval
Stage
Search and retrieval
2 of 4
Any address
Default
support-staging
Stage
Support copilot
2 of 4
Any address
300/min
zapier-legacy
Prod
Search and retrieval
1 of 4
Any address
Default
finops-dashboard
Prod
Cost dashboards
No inference
198.51.100.18/32
Default
ACTIVE HOLDERS
8
6
4
2
1
1
Disabled keys keep their permissions but cannot use them.
05
Key traffic
Requests, tokens and cost per key for the shared date range. Totals across keys match Overview and Usage analytics exactly.
Last 30 days: 1.62M requests across keys · matches Overview
● ci-review 29.3%
● prod-web 28.6%
● prod-ingest 22.5%
● batch-worker 17.2%
● support-staging 0.6%
● dev-shared 0.6%
ci-review
Prod
474.1K
29.3% · +31.6% vs previous
0.51% errors
4 models
Last call 9 min ago
prod-web
Prod
462.3K
28.6% · +28.3% vs previous
0.50% errors
4 models
Last call just now
prod-ingest
Prod
363.9K
22.5% · +25.9% vs previous
0.51% errors
4 models
Last call 2 min ago
batch-worker
Prod
278.6K
17.2% · +32.9% vs previous
0.47% errors
4 models
Last call 10 h ago
support-staging
Stage
10.3K
0.6% · +29.4% vs previous
0.50% errors
2 models
Last call 47 min ago
dev-shared
Dev
9,733
0.6% · +29.7% vs previous
0.32% errors ↑
4 models
Last call 19 h ago
dev-tomas-laptop
Dev
8,608
0.5% · +223.9% vs previous
0.55% errors
2 models
Last call 3 h ago
search-eval
Stage
7,829
0.5% · -21.0% vs previous
0.50% errors
2 models
disabled
partner-sandbox
Stage
1,215
0.1% · -50.0% vs previous
0.08% errors
1 model
expired
SILENT IN THIS RANGE · ACTIVE KEYS THAT CAN RUN MODELS
READ AND MANAGEMENT API CALLS
finops-dashboard · Cost dashboards
8,512 calls
terraform-admin · Platform automation
93 calls
No tokens are used, so these calls are not part of request totals.
06
Audit log
Every key-management event with who, when and from where. Actions you take on this page are added live and marked as made in this session.
27 events
Oct 15, 2026
Expiry reminder for ci-review
Reminder
Expires in 14 days. Reminder sent to Jonah Whitfield.
Volurynt · System · 08:00 UTC
Oct 9, 2026
Disabled search-eval
Disabled
Paused while the search index is migrated.
Lena Vogt · Dashboard · 09:12 UTC
Oct 6, 2026
Rate limit raised on prod-web
Restrictions
4,000 → 6,000 requests per minute.
Amara Osei · Dashboard · 16:05 UTC
Oct 2, 2026
partner-sandbox expired
Expired
Reached its expiry date. Secret ••••U2GE no longer works.
Volurynt · System · 00:00 UTC
Sep 15, 2026
Previous secret retired on prod-web
Secret retired
Overlap window ended for ••••M2XK.
Volurynt · System · 11:30 UTC
Sep 14, 2026
Rotated prod-web
Rotated
New secret ••••H4PZ. Previous secret ••••M2XK valid for 24 hours.
Amara Osei · Dashboard · 11:30 UTC
Sep 8, 2026
Created dev-tomas-laptop
Created
Development · Code review agent · 60 requests per minute
Tomás Ibarra · Dashboard · 13:20 UTC
Sep 1, 2026
Owner of ci-review changed
Owner
Tomás Ibarra → Jonah Whitfield.
Rowan Hale (you) · Dashboard · 09:20 UTC
Aug 30, 2026
Revoked hackathon-demo
Revoked
Hackathon ended. Secret ••••N6JW no longer works.
Amara Osei · Dashboard · 17:45 UTC
Aug 20, 2026
Rotated finops-dashboard
Rotated
New secret ••••F3MV. Previous secret ••••J8WC retired immediately.
Noor Kapoor · Dashboard · 10:15 UTC
Aug 18, 2026
Created hackathon-demo
Created
Development · Support copilot · expires Sep 1, 2026
Tomás Ibarra · Dashboard · 09:00 UTC
Aug 8, 2026
Previous secret retired on batch-worker
Secret retired
Overlap window ended for ••••C4NW.
Volurynt · System · 02:00 UTC