Gateway Keys
Per-user virtual keys for the AI Gateway — what Claude Code / Codex authenticate with. Budget-capped and revocable at the gateway; the real provider keys never leave it.
⚠ Gateway is in MOCK mode. The console demo works, but no real employee AI traffic is intercepted yet — minting a key won't enforce anything live. To go live: add provider keys to
.env, set LAB_GATEWAY=litellm, run docker compose up -d — then mint keys for everyone with the Mint for all seat-holders button on Gateway Keys (or headless: docker compose exec console node --import tsx lab/web.ts --mint-all-seats).Mint a key ⓘ
Setup files are not ready yet — the Public gateway URL (the address employee machines dial) has not been set, so every download would be refused. Set it in Settings → Gateway → Employee machine setup.
Getting it onto the user's machine: ⬇ bat / ⬇ sh per row (one-click setup file — employees can also self-serve from My Wallet, unless disabled in Settings) · at scale, push via GPO / Intune / Jamf:
ANTHROPIC_BASE_URL+ANTHROPIC_AUTH_TOKEN (Claude Code), OPENAI_BASE_URL=…/v1+OPENAI_API_KEY (Codex).Getting it back OFF the machine — if the gateway is down ⓘ: add
&undo=1 to any ⬇ bat / ⬇ sh link above for the disconnect file — no key inside, identical for everyone, so hand out one copy. Employees have the same link on My Wallet. Outage procedure: install/README.md → “If the gateway is down”.| User | Provider | Alias | Key | Budget | Minted | |
|---|---|---|---|---|---|---|
| No keys yet — mint the first one above. | ||||||