Core concepts

Each API entry maps to a provider endpoint and keeps its access settings.

Keys identify each consumer so limits and policies can be enforced per client.

Policies define routes, allowed methods, and access constraints.

Rate limits are enforced per key to avoid shared usage spikes.

Access windows define valid time ranges for each key.

Logs provide traceability for every request and policy decision.