One key per job, agent, or app.

Scoped, rate-limited, IP-pinned. Rotate without downtime. Revoke in one click. Works with humans, agents, and anything that can send an HTTP header.

Your keys

5 keys · 3 active · 1 paused · 1 revoked. Never shown again after creation — store them in a secret manager.
LabelKeyScopesCreatedLast used
Prod web app mc_live_prod_••••x9c2 readspend 2026-03-14 4s ago RotateEditRevoke
Trading agent · agt_7Zf2kQ mc_live_agt_••••7f3b readspend 2026-04-02 12s ago RotateEditRevoke
CI/CD deploy mc_live_ci_••••a112 buildadmin 2026-02-28 2h ago RotateEditRevoke
Old mobile beta mc_test_mob_••••pp42 read 2026-01-10 Paused ResumeRevoke
Legacy intern key mc_live_••••xxxx admin 2025-11-20 Revoked View audit

Scopes

Narrow as possible. Least privilege wins. You can combine scopes on a single key.
read

read

Call modules, read receipts and usage. Cannot top up or change settings. Safe for public clients.

build

build

Publish modules, deploy new versions, manage builds. Cannot spend balance.

spend

spend

Decrement meter on paid calls. Required for any module that costs money. Attach caps.

admin

admin

Manage keys, teammates, billing, webhooks. Server-side only. Rotate quarterly.

IP allowlist

Keys only work from these IPs or CIDR blocks. Leave empty to allow all. Supports IPv4 and IPv6.

203.0.113.42 10.0.0.0/16 2a01:4f9::/32 office-vpn

Rate limit per key

Upper bound on RPM. Bursts up to 3x for 10 seconds. Returns HTTP 429 with Retry-After.

500 RPM
2,000 peak

Environment variables

Drop into .env, a secret manager, or your CI. Never commit production keys.
~/.env
# MeterCall API credentials
export MC_API_KEY="mc_live_prod_8a3f9b22e1c4d6..."
export MC_API_BASE="https://api.metercall.ai/v1"

# Optional: pin which key to use for agents
export MC_AGENT_KEY="mc_live_agt_7f3b1a90..."

# Optional: enable per-call spend tracing
export MC_TRACE="1"