Skip to main content

Centralized Gateway Proxy & API Keys

PostQode Enterprise features a high-performance Gateway Proxy microservice that acts as a secure reverse proxy and policy enforcement layer between developer IDE extensions and backend LLM providers.


Gateway Proxy Architecture

  • Centralized API Key Management: Eliminates the need for developers to handle individual provider API keys. Keys are securely stored in server-side vaults and injected at request time.
  • Intelligent Prompt Caching: Transparently leverages Anthropic Prompt Caching and OpenAI prefix caching to reduce latency and cut token costs by up to 80%.
  • Granular Usage Analytics: Track exact prompt tokens, completion tokens, cache read tokens, and cost breakdown per gateway key via /gateway-keys/:keyId/usage.
  • Dynamic Rate Limiting & Failover: Automatically distributes traffic across multiple upstream provider keys to avoid rate limit spikes and route around upstream provider outages.

Gateway API Keys vs Workspace Keys

PostQode supports two modes of key distribution:

Key TypeScopeManaged ByUse Case
Gateway Proxy KeysOrganization / TeamOrg AdminEnterprise teams using centralized billing, governance, and audit tracking.
Direct Workspace KeysUser / ProjectIndividual DeveloperPersonal API keys (OpenAI, Anthropic, OpenRouter) configured directly in IDE settings.

Provisioning Gateway Keys for Developers

  1. In the PostQode Web Console (app.postqode.ai), navigate to Gateway Keys (/gateway-keys).
  2. Click Create Gateway Key (/gateway-keys/createKey).
  3. Assign the key to a specific user or team, set optional expiration dates, and apply spending caps.
  4. Developers insert this Gateway Key into their PostQode IDE extension provider settings under PostQode Managed Provider.