What to send us#
Evaluation starts with the workload you intend to run. Send enough detail to answer against it, not against a generic feature list:
- The platforms and endpoints you expect to use.
- Expected request volume, peak concurrency and any scheduled bursts.
- Where your systems and users are, and your data retention and deletion requirements.
- Your API-key and access-control requirements, and your security and legal review questions.
- Your target test, procurement and production dates.
If you already have a failing or slow request, include its request_id. Never send an API key or a webhook secret.
Contact: hello@onekey.dev is the placeholder mailbox for now. There is no sales form or named owner yet.
What exists today#
| Need | What is documented today |
|---|---|
| Predictable spend | Flat per-endpoint credits, a worst-case check before each call, and per-key credit limits that stop a key at a number you chose. Credits never expire. See Pricing. |
| Rate limits | 600 requests per minute and 50 in flight per key by default, refilled continuously, with headers on every response. See Rate limits. |
| Access control | Multiple keys per account, each with its own credit limit and revocable on its own. Revoking a key pauses the monitors it created. |
| Safe retries | Idempotency keys and refunds on failure. See Reliability. |
| Change notifications | Monitors with signed webhooks that refuse private and internal addresses. |
| Legal | Published Terms, Privacy Policy, Acceptable Use, Public Data Notice, Refunds & credits, DPA, SLA and takedown and abuse form. |
| Data boundary | Onekey collects public data only: no logins, nothing behind a paywall. See the Public Data Notice. |
Not yet available#
There is no security whitepaper, questionnaire pack, subprocessor list, penetration-test summary or third-party attestation yet. If your review requires a specific document, tell us which one and we will say what exists; do not treat this page or the legal pages as a substitute for a document your process requires.
| Topic | Status |
|---|---|
| Custom rate limits | By agreement. No tiers are published. |
| Uptime commitment or service credits | None. The SLA is best-effort; a written commitment would apply only if signed by Onekey. |
| Support hours and response times | Best-effort by email; see the SLA. |
| Invoicing and purchase orders | By agreement. Pricing is USD list prices per pack today. |
Evaluating before you talk to us#
- Get a key: 1,000 free credits cover the open-platform endpoints. Hard-to-reach platforms (X, TikTok, Instagram, Reddit, and others marked on their page) need a verified email and a purchased pack.
- Price your workload with the credit calculator and the pricing page.
- Price a multi-platform job for 0 credits with
dry_run=trueon universal search or a report. - Check how failures behave on Reliability and live state on the status page.