API Keys

Where keys live and what they access.

DEV_API_KEY Bearer
Location ~/.env + CF secrets
Services api.webuildfast.ai
Access Admin bypass — all endpoints, user id=1, [email protected]
Rotation Manual
GRAPHQL_API_KEYS Bearer
Location CF secrets (comma-separated)
Services api.webuildfast.ai /data/graphql
Access GraphQL access without session login. User-role.
Rotation Manual via wrangler secret put
WEBUILDFAST_TEST_USER N/A
Location ~/.env
Services webuildfast.ai login
Access Test account credentials for E2E tests
Rotation Manual
WEBUILDFAST_TEST_PW N/A
Location ~/.env
Services webuildfast.ai login
Access Test account password
Rotation Manual
WEBUILDFAST_TEST_USER_EMAIL N/A
Location ~/.env
Services webuildfast.ai login
Access Test account email
Rotation Manual
UAT_USER_EMAIL / UAT_USER_PASSWORD N/A
Location ~/.env
Services webuildfast.ai login
Access UAT test credentials
Rotation Manual
CF_ACCESS_CLIENT_ID / SECRET Cf-Access-Client-Id / Cf-Access-Client-Secret headers
Location CF secrets
Services mainserve + modelserve
Access Cloudflare Access service tokens for internal services
Rotation Manual
MAINSERVE_BASE_URL N/A
Location CF env vars
Services orchestrator, API
Access URL for ClickHouse/GraphQL backend
Rotation N/A
MODELSERVE_BASE_URL N/A
Location CF env vars
Services ai-models
Access URL for image/body/face/textile model backend
Rotation N/A