Compute
Deploy an app from a GitHub repository or a container image. Unkey builds and runs it in production and preview environments, with automatic domains and a gateway in front of every deployment.
API Management
Issue API keys for your public API and verify them on every request, with rate limits, permissions, and usage credits in the same check. Your app runs wherever it runs today.
keys.verifyKey. See API key authentication.
Both products live in a workspace, the top-level container for everything you create. The workspace holds your team and their roles, and one billing account where each product has its own plan. You work with it through the dashboard at app.unkey.com, the HTTP API at api.unkey.com, the SDKs, and the unkey CLI. Root keys authenticate the API and SDKs, and the CLI accepts a root key or a session from unkey login. This section covers those shared pieces in detail.
Workspace
Workspaces
What a workspace holds, creating one, and its general settings.
Team
Admin and developer roles, invitations, and two-factor authentication.
Audit logs
Who changed what, and how long the record is kept.
Log drains
Forward logs and events to HTTP or Axiom.
Billing
Plans
API tier and Compute plan, billed separately.
Limits
Every ceiling, per plan.
Usage
What you consumed this month.
Root keys
Root keys
The credential for the API: create, rotate, and delete.
Root key permissions
Least-privilege permissions for deployments, agents, and API Management.
Configure root keys
Assign permissions in the dashboard or through the API.
Permission reference
Resource paths, actions, and what each operation requires.
API
HTTP API basics
Base URL, envelope, request IDs, pagination.
API authentication
Bearer root keys and the errors they can produce.
RPC naming convention
POST /v2/{service}.{procedure}, services, verbs.API errors
RFC 7807 fields, validation errors, status codes.
Too many requests
What a 429 from
api.unkey.com means.CLI
The unkey CLI
The command groups and which product owns each.
Install the CLI
npm package or GitHub release.
CLI authentication
Flag, environment variable, or
unkey login, in that order.Output and shared flags
--output json, --body, --api-url, --config.Security
Security
How Unkey protects your keys and what you can turn on.
Key storage
Why a key is shown once, and recoverable keys.
GitHub secret scanning
What happens when a key leaks to a public repository.
Delete protection
Block deletion of keyspaces, apps, and .
More
AI coding
Connect your coding assistant to Unkey over MCP.
Error codes
What every Unkey error code means and how to fix it.
Glossary
Every term, tagged with the product that owns it.
Self-hosting
These docs cover hosted Unkey: the dashboard atapp.unkey.com and the API at api.unkey.com. The source is public, and most of it is licensed under FSL-1.1-ALv2 (see LICENSE for the exceptions), so you can fork and run it under those terms. There’s no self-hosting guide. Security fixes land on main and the latest release but they aren’t backported, so you will want to run one of those for the most up-to-date security features.