Key scopes, IP allow-list, usage and rotation
- Keys carry a scope: read only, orders, or full. Existing keys keep full access.
- Optional IP allow-list per key (IPs or CIDR ranges).
- Usage per key: total requests, last 7 days, last IP, on the Keys page and at
GET /keys/{id}/usage/. - Rotate a key from the Keys page or
POST /keys/{id}/rotate/: same key id, new secret, old value stops at once. - This changelog and a Postman collection.
