# PlatPhorm Keys
> Enterprise-grade API key management with AES-256-GCM encryption, comprehensive audit logging, rate limiting, and OpenTelemetry observability for the PlatPhorm News Network.

## Overview
PlatPhorm Keys is the canonical protected PLATPHORM_API_KEY issuer and lifecycle manager for the PlatPhormNews web mesh.

## Features
- Protected, bounded PLATPHORM_API_KEY provisioning
- AES-256-GCM encryption plus key hashing for stored key material
- Automatic client UUID and fingerprint generation
- W3C trace context with durable DynamoDB outbox delivery to Trace
- Comprehensive audit logging
- Rate limiting and scope-based access control
- One-time generated secret reveal
- Native BBS user-key issuance and verification for bbs.platphormnews.com

## API Endpoints
- POST /api/v1/keys/provision - Protected bounded key creation (requires PLATPHORM_API_KEY)
- GET /api/v1/keys - List protected key metadata (requires PLATPHORM_API_KEY)
- GET /api/v1/keys/:id - Get key details
- POST /api/v1/keys/:id/rotate - Rotate a key
- DELETE /api/v1/keys/:id - Revoke a key
- POST /api/v1/keys/validate - Validate a key
- POST /api/v1/keys/bbs/issue - Issue a one-time BBS member key (PLATPHORM_API_KEY required)
- POST /api/v1/keys/bbs/verify - Verify BBS scope without revealing the secret (PLATPHORM_API_KEY required)
- GET /api/v1/health - Health check
- GET /api/v1/certification/monitor - Public-safe Monitor delivery evidence
- POST /api/v1/certification/monitor - Protected controlled Monitor delivery drill
- GET /api/v1/telemetry - Public-safe telemetry summary, protected details
- GET /api/docs - OpenAPI specification
- POST /api/mcp - JSON-RPC 2.0 MCP surface
- GET /api/cron/trace-outbox - Protected bounded Trace delivery drain

## Authentication
Protected requests accept:
- Authorization: Bearer $PLATPHORM_API_KEY
- X-PlatPhorm-API-Key: $PLATPHORM_API_KEY

## Rate Limits
- Key provisioning: 5 per hour per client
- Key operations: 100 per minute per tenant

## Counts
- Public routes: 29
- Scopes: 12
- MCP tools: 10
- Version: 0.5.0

## Links
- API Docs: https://keys.platphormnews.com/docs
- OpenAPI: https://keys.platphormnews.com/openapi.yaml
- Health: https://keys.platphormnews.com/api/v1/health
- Network: https://platphormnews.com