Live demo · no signup
Watch the edge forward one request and refuse two.
These are real requests through proxy.keyvaultedge.com. The demo token wraps a fake key for an echo service, so you can see which headers the upstream actually received. Your code sends the token; the edge adds the key only when every check passes.
Pick a scenario above. Each one sends a real request through proxy.keyvaultedge.com and shows exactly what came back.
What each token enforces
- Allowed hosts (checked from the request's Origin or Referer)
- Allowed endpoints, such as only
POST /v1/chat/completions - Requests per minute and an estimated monthly cost cap
- Expiry, and one-click revoke from the dashboard
- A breach event and alert when a check fails
What it doesn't do
- A browser can't fake its Origin, but a script on a server can. A copied token can be replayed from a server, so treat it as a credential.
- The protection is that every token is limited and revocable: endpoints, rate, spend and expiry cap the damage, and you can kill it without rotating the real key.
- We sit in the request path. If the proxy is down, proxied calls fail.
Put a limited token in front of your own key
14-day free trial, then plans from $9/month. Works with OpenAI, Anthropic, Gemini, Stripe and any API that takes a header key.