API Key Rules
This page documents the rules and policies governing Build a Doc API keys.
Key Policies
Key Limits
| Plan | Maximum Keys |
|---|---|
| Free | Limited |
| Paid Plans | Multiple (plan-dependent) |
| Enterprise | Unlimited |
Key Lifetime
- Keys do not expire automatically
- Keys remain valid until explicitly revoked
- Revoked keys cannot be reinstated
Security Requirements
Key Format
- Unique alphanumeric string
- Sufficient length for security
- Generated by secure random process
Storage Requirements
- Store in secure credential stores
- Do not expose in code repositories
- Do not transmit via insecure channels
Usage Tracking
All API key usage is tracked:
- Request counts
- Action types
- Timestamps
- Success/failure rates