API Token Page User Guide

1. What Can the API Token Page Do?

The API Token page is used to manage developer API keys. It is suitable for users who need to call platform capabilities through programs, scripts, or third-party tools.

The page supports the following capabilities:

• Create API keys
• View the key list
• Copy keys
• Edit key configurations
• Set call quota
• Set expiration time
• Restrict available models
• Set an IP whitelist
• Delete one or multiple keys
• Copy sample code

2. How Do I Enter the API Token Page?

This page is usually not a main navigation entry on the homepage. You usually enter API Key Management from the Personal Center, or click Go to Key Management from Skills / MCP Access to enter API Key Management.

3. Who Are API Tokens Suitable For?

They are suitable for users who:

• Need to call platform APIs with code
• Need to integrate platform capabilities into their own systems
• Need to allocate different keys for different projects

If you are only a regular web user, you may not need this page.

4. How Do I Create a New Key?

1. Enter the API Token page.
2. Click Create Key.
3. Fill in the key name.
4. Choose whether to limit the quota.
5. Set the expiration time.
6. Set model restrictions and an IP whitelist as needed.
7. Click confirm to create it.

Important reminder: After the key is created successfully, copy it promptly and store it securely. It is equivalent to your API access credential.

5. How Should I Name a Key?

We recommend naming keys by purpose, for example:

• Official Website Production
• Test Script
• Mobile Joint Debugging
• Data Processing Service

This makes it easier to distinguish keys for different purposes later.

6. What Is Call Quota?

Call quota is used to limit the maximum quota this key can consume.

Suitable scenarios:

• Set an upper limit for test projects
• Limit quota for temporary partners
• Control consumption risk for different projects

If you do not want a limit, you can enable unlimited quota.

7. What Is Expiration Time?

Expiration time means the key automatically becomes invalid after the specified time.

Suitable scenarios:

• Temporary testing
• Short-term projects
• Time-limited authorization for others

If it is for long-term personal use, you can decide whether to set it based on security requirements.

8. What Are Model Restrictions?

Model restrictions mean this key can call only the models you specify.

Suitable scenarios:

• Allow access only to certain types of models
• Limit the usage scope of test environments
• Avoid mistakenly calling high-cost models

If it is not set, the system usually handles it according to the default strategy or automatically.

9. What Is an IP Whitelist?

An IP whitelist is used to restrict this key so it can be used only from specified IP addresses.

Suitable scenarios:

• The service is deployed on fixed servers
• You need higher security
• You do not want the key to be abused in other environments

10. How Do I Copy a Key?

In the list, you can click Copy directly to view or copy key content. Some scenarios also support batch copying.

Note: After copying, avoid leaking it in public chats, code repositories, or screenshots.

11. How Do I Delete a Key?

Click Delete in the key list and confirm to remove it.

Note: After deletion, programs that depend on this key will no longer be able to access the API.

12. Why Do I Need Multiple Keys?

We recommend creating keys separately by project or environment, for example:

• One for development
• One for testing
• One for production
• One for third-party collaboration

This makes troubleshooting easier and is also more secure.

13. Frequently Asked Questions

1. Why Cannot I Find the Full Key After It Is Created Successfully?

Some systems display the full key only after creation or during specific operations. Please copy and save it immediately after creation.

2. Why Did the Program Call Fail?

Please check:

• Whether the correct key was copied
• Whether the key has expired
• Whether it is limited by quota
• Whether it is limited by model restrictions or the IP whitelist

3. Why Can I See the Page but Do Not Know How to Use It?

If you do not need API integration, you can ignore this page for now. It is mainly intended for developer integration users.

14. Summary of Usage Recommendations

We recommend splitting keys by purpose, setting reasonable quota and expiration times, and keeping keys secure. Avoid distributing keys casually as ordinary text.