> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aihubmix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Member and system keys

> Choose member or system keys for an enterprise workspace, set limits and expiration, and safely disable, replace, or delete credentials.

Enterprise workspaces offer two types of model API credentials. Choose the type based on who or what will use it.

<h2 id="key-types">
  Choose a key type
</h2>

| Type | Ownership and use | Who manages it |
| - | - | - |
| Member key | Belongs to an active workspace member; useful for individual development and member-attributed requests | The member manages their own keys; administrators manage them within organization permissions |
| System key | Belongs to the workspace; useful for persistent applications and services, with an optional maintenance contact | Organization administrators |

A system key's maintenance contact is not its owner. The key does not automatically stop when that contact leaves the organization.

<h2 id="create-key">
  Create and store a key
</h2>

1. Confirm the organization and workspace, then open **API keys**.
2. Create a key, give it a recognizable name, and choose its type, limit, and expiration.
3. Configure model mapping, fallback, or other advanced options as needed.
4. Copy the full key after creation and store it in a secret manager or environment variable.

The full credential is shown only once, when created. The list shows a masked value afterward and cannot reveal the original key.

<h2 id="limits-and-expiry">
  Limits and expiration
</h2>

Key limits can be daily, weekly, monthly, or lifetime. An unlimited key still follows workspace hard limits and the account balance. See [budgets and limits](/en/enterprise/budgets).

An enterprise key's expiration is read-only after creation. Create a replacement if you need a longer lifetime. An expired key cannot be re-enabled.

<h2 id="replace-key">
  Replace or disable a key
</h2>

1. Create a replacement with the required permissions and limits.
2. Update the applications using it and verify requests with the new key.
3. Disable or delete the old key.

Disabling temporarily stops use; deletion requires confirmation. Resolve member keys before their owner leaves, is suspended, or is removed. Historical requests retain their original attribution.

Related: [API key management](/en/console/api-keys) · [Model mapping and fallback](/en/api/Model-Mapping-Fallback) · [Members and permissions](/en/enterprise/members)

Last updated: 2026-10-13


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.