{
  "_comment": "Template only. Copy to config/api_keys.json (git-ignored) and replace with real, randomly-generated tokens. NEVER commit the real file. If config/api_keys.json is absent at runtime, api_server generates a random key at first start and prints it once.",
  "api_keys": {
    "REPLACE_WITH_RANDOM_KEY": {
      "name": "Your User",
      "permissions": ["read", "write"],
      "description": "Generate with: python -c \"import secrets; print(secrets.token_urlsafe(32))\"",
      "rate_limit": 100,
      "enabled": true
    }
  },
  "settings": {
    "default_rate_limit": 100,
    "token_expiry_days": 30,
    "require_https": true
  }
}