Add API key management endpoints for LLM proxies and providers in gateway controller
@renuka-fernando is already working on this.
Since Mar 9, 2026.
- Dominant language
- Go
- Stars
- 71
- Forks
- 111
- Avg merge
- 1d 14h
- Merged PRs (30d)
- 110
Description
Description
In standalone gateway mode (without platform-api), API key management is only supported for regular APIs via /apis/{id}/api-keys endpoints. LLM proxies and LLM providers do not have equivalent API key endpoints in the gateway controller REST API.
When using the platform-api, API keys work for all three resource types (APIs, LLM proxies, LLM providers) because the platform-api generates keys and pushes them to gateways via WebSocket events. However, in standalone mode this functionality is missing for LLM resources.
The underlying apikeyxds infrastructure in the gateway controller is already resource-agnostic (keys are stored by UUID), so the core mechanism already supports this.
What needs to be done:
- Add
POST /llm-proxies/{id}/api-keys— Create API key for an LLM proxy - Add
GET /llm-proxies/{id}/api-keys— List API keys for an LLM proxy - Add
PUT /llm-proxies/{id}/api-keys/{apiKeyName}— Update API key for an LLM proxy - Add
POST /llm-proxies/{id}/api-keys/{apiKeyName}/regenerate— Regenerate API key for an LLM proxy - Add
DELETE /llm-proxies/{id}/api-keys/{apiKeyName}— Revoke API key for an LLM proxy - Add equivalent endpoints for
/llm-providers/{id}/api-keys - Update
api/openapi.yamlwith the new endpoints - Regenerate server code via
oapi-codegen
Version
No response
Related Issue
No response
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.