Gateway Keys
Per-user virtual keys for the AI Gateway — what Claude Code / Codex authenticate with. Budget-capped and revocable at the gateway; the real provider keys never leave it.
⚠ Gateway is in MOCK mode. The console demo works, but no real employee AI traffic is intercepted yet — minting a key won't enforce anything live. To go live: add provider keys to
.env, set LAB_GATEWAY=litellm, run docker compose up -d — then mint keys for everyone with the Mint for all seat-holders button on Gateway Keys (or headless: docker compose exec console node --import tsx lab/web.ts --mint-all-seats).Mint a key ⓘ
Getting it onto the user's machine: ⬇ bat / ⬇ sh per row (one-click setup file — employees can also self-serve from My Wallet, unless disabled in Settings) · at scale, push via GPO / Intune / Jamf:
ANTHROPIC_BASE_URL+ANTHROPIC_AUTH_TOKEN (Claude Code), OPENAI_BASE_URL=…/v1+OPENAI_API_KEY (Codex).| User | Alias | Key | Budget | Minted | |
|---|---|---|---|---|---|
| No keys yet — mint the first one above. | |||||