OMDAA API Free & API Keys: Scopes, Rotation & Usage

Manage auth at /dashboard/api-keys and /dashboard/free-api: create, scope, revoke, rotate, and inspect usage. DevPortal product: API Keys.

Practical key model

Separate local, staging, and least-privilege production keys. Revoke on staff exit. Never commit keys or ship them in public mobile apps. Free forever = ongoing free tier under fair-use limits shown in the dashboard. MCP uses the same key family.

Suggested scope map

End-user mobile: no direct keys — backend only. Automation worker: send + limited read. Dev MCP: broader scopes on staging. Internal admin: separately audited keys.

Check free-api weekly after launch for hot endpoints. Upgrade before peak season. Store secrets in a manager — not laptop env files.

Approaching limit signals

More 429s, slower calls, or free-api warnings. Mitigate with less polling, batching, caching static answers, then upgrade. Surface errors on an internal status board — do not hide them from product.

Frequently Asked Questions

Truly free forever?

Yes for the published free tier; see free-api for limits.

Leaked key?

Rotate/revoke immediately.

Scopes?

Grant only what the app needs.

OAuth apps?

See Sign in with Omdaa (OIDC).

Start free: Create account · Dashboard · Docs