Proxy not connected. Dashboard is showing demo data.
To connect to a live proxy, set
PROXY_URL and start the server
(node product-api/server.js).Active Keys
—
vault keys
Today's Spend
—
across all keys
Calls Today
—
proxied requests
Blocked Today
—
policy violations
Vault Keys
| Name | Key | Status | Vendor | Cap | Spend today | Allowed ops | Expires | |
|---|---|---|---|---|---|---|---|---|
Audit Log
Last 50 calls · auto-refreshes every 15s
| Time | Key name | Vendor | Operation | Status | Amount | Result |
|---|---|---|---|---|---|---|
Today's Spend
| Key name | Vendor | Calls | Blocked | Spend | vs. Cap |
|---|---|---|---|---|---|
These are the exact curl commands your agent uses. Swap the vault key below for a real one from the Keys tab, or
issue a new key and point your agent at
https://proxy.keybrake.com.
1 — Proxy a Stripe charges.create call
Your agent sends this (vault key replaces real Stripe key):
curl -s -X POST https://proxy.keybrake.com/stripe/v1/charges \
-H 'Authorization: Bearer vault_key_demo_abc123' \
-H 'Content-Type: application/x-www-form-urlencoded' \
-d 'amount=1000¤cy=usd&source=tok_visa&description=Agent+purchase'
Keybrake enforces cap, logs call, forwards to Stripe, returns real response:
{
"id": "ch_3PzQ...",
"object": "charge",
"amount": 1000,
"currency": "usd",
"status": "succeeded",
"description": "Agent purchase"
}
2 — Blocked by endpoint allowlist
Agent tries to create a payout (not in allowlist):
curl -s -X POST https://proxy.keybrake.com/stripe/v1/payouts \
-H 'Authorization: Bearer vault_key_demo_abc123' \
-d 'amount=50000¤cy=usd&method=instant'
Keybrake blocks before reaching Stripe (403):
{
"error": "Operation \"payouts.create\" is not permitted by this vault key's policy",
"allowed_endpoints": ["charges.create", "customers.list"],
"attempted": "payouts.create"
}
3 — Daily cap enforcement
After $50 of charges accumulate today, next call is blocked (429):
{
"error": "Daily spend cap of $50 reached",
"spent_today_usd": 50.00,
"cap_usd": 50
}
4 — Kill switch (sub-second revoke)
Revoke the key — all subsequent calls fail immediately:
curl -s -X DELETE https://proxy.keybrake.com/keys/vault_key_demo_abc123 \
-H 'X-Admin-Key: $ADMIN_KEY'
Any call after revoke:
{ "error": "Vault key not found or has been revoked" }