API Key Restriction

Example workflows

Starting points built from this record, not transcripts of a run. Each prompt is written the way it should be sent, as one paragraph, and each is worth editing before you send it.

1. 01

   Stand it up from scratch

   You have read the record and want API Key Restriction working in a real project rather than a sandbox.

   Set up API Key Restriction in this project — restrict an API key to approved IP addresses. Walk it end to end, tell me exactly what you changed, and flag anything I have to switch on myself before it works.

   Expected outcome

   A working setup, a plain list of what changed, and a short list of anything left for you to switch on. Check that list before assuming it is done.

2. 02

   Review it before you publish

   API Key Restriction is wired in and you are about to put it in front of people. This is the pass that catches the half-configured version.

   Review how this project uses API Key Restriction before I publish. Check API key management and enhanced security for API access, list anything that is missing, misconfigured, or only half wired, fix what is safe to fix, and tell me what you left alone and why.

   Expected outcome

   A findings list split into what was fixed and what was left, with a reason for each. Anything left alone is yours to decide on.

3. 03

   Decide whether it fits your project

   Worth five minutes before you wire anything in. API Key Restriction sits in Security, and not every project needs it.

   I am building the project in this workspace. Given that API Key Restriction restrict an API key to approved IP addresses, tell me honestly whether it fits what I am building, including the cases where I should not use it. If it does fit, give me the single smallest first step.

   Expected outcome

   A direct yes or no with the reasoning, the cases against it, and one first step. Treat a hedged answer as a no.

Frequently asked

• What is API Key Restriction?

  API Key Restriction is Lovable's Security feature: Restrict an API key to approved IP addresses. Workspace admins and owners on Business and Enterprise plans can now restrict a workspace API key to an allowlist of IP addresses and address ranges.

• Is API Key Restriction GA or in beta?

  API Key Restriction is generally available (GA) on Lovable.

• What Lovable plan includes API Key Restriction?

  The atlas has not verified which Lovable plans include API Key Restriction. Check Lovable's pricing page.

• When did API Key Restriction launch?

  Lovable has not published a verified release date for API Key Restriction.

• Cloud Database Password RotationSame category, also GA · Available now
• EU InferenceSame category, also GA · Available now
• Project Security View UpgradesSame category, also GA · Available now