Live key brokering

Centralize your API keys.
Control access remotely.

A middle-layer broker that holds your upstream API secrets, issues per-app keys to consuming Fat Beard Media applications, and lets you flip access on or off in real time. CORS is enforced per app.

Per-app keys

Issue, label, and revoke keys for each consuming app. Hashed at rest.

Two modes

Proxy upstream calls so secrets never leave the server, or let trusted apps fetch keys directly.

CORS control

Maintain an allowlist of origins per app. Server-to-server still works.

Usage logs

Per-request status, latency, and origin — see exactly who's calling what.

Endpoints

POST/GET/... /api/public/v1/proxy/{providerSlug}/{path}

GET /api/public/v1/keys/{providerSlug}