Limits and Quotas - AI API Keys

Limits

Name format

Key names are 1 to 50 characters. Letters, digits, spaces and _'()- are accepted, but the name must start and end with a letter or digit.

Scope rules

models and deployments each accept explicit entries. Deployments in error or deleted state cannot be added; any other state (including deployments still being provisioned) is accepted. Models must be public models.

Plaintext shown once

The key value is returned only in the create-ai-api-key response. If you lose it, create a new key and revoke the old one.

Revocation retention

A revoked key stays listed with revoked-at set for 30 days, then is deleted. Revoked keys cannot be updated.

Zone scope

Keys are stored per zone. A key is created in the same zone where the deployment or on-demand inference endpoint is hosted and authenticates endpoints in that zone only. During the On-Demand Inference private preview, review its current availability before creating the key.

Quotas

Key count

The number of AI API Keys per organization is limited by quota. create-ai-api-key consumes one unit and revoke-ai-api-key releases it. To request an increase, please contact support by opening a Ticket in the Portal.