We are publishing multiple APIs and want to ensure they are not misused, while also being able to define who can make how many requests. Currently, not all users are behaving as we would like.

Therefore, we are planning to introduce API keys for requests. The process should look as follows:

• New users register via a website using their email.
• We generate an API key, store it in our systems, and share it with the user.
• The user sends requests using this API key and gains access.
• Requests without an API key should be rejected.
• Higher request limits should be configurable for certain users compared to standard users.

With this, we want to:

• Accurately attribute access.
• Grant more privileges to important services than to private hobby projects.
• Restrict unregistered access.

Our questions:

• Does LoadMaster generally support these scenarios?
• Is there an interface for easily managing API keys (generating, adding, removing)?
• Is there an interface for setting request limits/quotas per API key?
• Are there logs/reports on access, and can these be exported or integrated into our OpenSearch analytics platform?
• Which license do we need?

Thank you for looking into this!