API Key Management

curl -X POST https://api.docintell.com/v1/keys \
  -H "Authorization: Bearer dk_live_YOUR_ADMIN_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Production Server",
    "environment": "live"
  }'

curl -X GET https://api.docintell.com/v1/keys \
  -H "Authorization: Bearer dk_live_YOUR_API_KEY"

curl -X GET "https://api.docintell.com/v1/keys?include_deprecated=false" \
  -H "Authorization: Bearer dk_live_YOUR_API_KEY"

#!/usr/bin/env python3
"""API Key Health Check - Run daily to monitor key status."""
import os
import sys
from datetime import datetime, timedelta

import requests

API_KEY = os.environ["DOCINTELL_API_KEY"]
BASE_URL = "https://api.docintell.com"

def check_api_keys():
    """Check API key health and report issues."""
    response = requests.get(
        f"{BASE_URL}/v1/keys",
        headers={"Authorization": f"Bearer {API_KEY}"}
    )
    response.raise_for_status()

    keys = response.json()["keys"]
    issues = []

    # Check 1: Unused keys (never used or >30 days)
    cutoff = datetime.utcnow() - timedelta(days=30)
    for key in keys:
        if key["last_used_at"] is None:
            issues.append(f"⚠️ UNUSED: '{key['name']}' has never been used")
        else:
            last_used = datetime.fromisoformat(
                key["last_used_at"].replace("Z", "+00:00")
            )
            if last_used < cutoff:
                days_ago = (datetime.utcnow().replace(tzinfo=last_used.tzinfo) - last_used).days
                issues.append(
                    f"⚠️ STALE: '{key['name']}' not used in {days_ago} days"
                )

    # Check 2: Keys in grace period
    for key in keys:
        if key["status"] == "deprecated":
            days = key["grace_period_days_remaining"]
            if days <= 2:
                issues.append(
                    f"🚨 URGENT: '{key['name']}' expires in {days} days!"
                )
            else:
                issues.append(
                    f"⏳ GRACE PERIOD: '{key['name']}' expires in {days} days"
                )

    # Check 3: Multiple active keys (should only have 1 per environment)
    active_live = [k for k in keys if k["status"] == "active" and k["environment"] == "live"]
    active_test = [k for k in keys if k["status"] == "active" and k["environment"] == "test"]

    if len(active_live) > 1:
        issues.append(
            f"⚠️ MULTIPLE LIVE KEYS: {len(active_live)} active live keys found"
        )
    if len(active_test) > 3:
        issues.append(
            f"⚠️ MANY TEST KEYS: {len(active_test)} active test keys found"
        )

    # Report results
    if issues:
        print("API Key Health Check - Issues Found:")
        for issue in issues:
            print(f"  {issue}")
        return 1
    else:
        print("✅ API Key Health Check - All keys healthy")
        return 0

if __name__ == "__main__":
    sys.exit(check_api_keys())