API key scope
Resource groups, editable allowlists, quotas and aliases scoped to a key.
On this page
Model permissions
Choose a resource group and model scope when creating an API key. You can edit model permissions later in the console; the resource group is fixed. Grant only the models your project needs.
Console → API Keys → edit model scope to change the allowlist or allow all models in the group. GET /v1/models applies the same group and allowlist filters; it defaults to chat. Use ?output_modalities=all for all categories.
Aliases and quotas
Aliases belong to a key; recreate them when switching keys. Targets must remain in that key's group and permissions. Key quotas and account balance are separate limits: quota_exhausted and insufficient_balance.