{
  "site": "OUACC Account",
  "canonical": "https://ouacc.cc/api-keys",
  "generated_at": "2026-06-11T09:37:12.363853Z",
  "api_key_center_enabled": true,
  "api_key_issuance_enabled": false,
  "api_credentials_issued": false,
  "webhook_delivery_enabled": false,
  "webhook_signing_secret_issued": false,
  "reseller_api_enabled": false,
  "order_api_enabled": false,
  "stock_lock_api_enabled": false,
  "card_secret_api_enabled": false,
  "payment_api_enabled": false,
  "ip_allowlist_enabled": false,
  "sandbox_credentials_enabled": false,
  "counts": {
    "credential_types": 6,
    "security_controls": 6,
    "requirements": 6,
    "api_credentials": 0,
    "webhook_secrets": 0,
    "payment_channels": 0
  },
  "credentials": [
    {
      "name": "Public Catalog",
      "scope": "公开目录读取",
      "status": "无需密钥",
      "summary": "公开分类、商品模板、站点状态和 SEO 资料仍可通过公开接口读取。"
    },
    {
      "name": "Catalog Feed",
      "scope": "JSON/CSV 目录同步",
      "status": "无需密钥",
      "summary": "Feed 仅包含模板、库存字段和非现货边界，不返回卡密。"
    },
    {
      "name": "Sandbox Key",
      "scope": "测试订单与 Webhook 样例",
      "status": "未发放",
      "summary": "当前 Sandbox 为静态样例，不签发真实测试密钥。"
    },
    {
      "name": "Webhook Secret",
      "scope": "回调签名校验",
      "status": "未发放",
      "summary": "支付、发货和订单回调未启用，因此不签发签名密钥。"
    },
    {
      "name": "Reseller Order Key",
      "scope": "代理下单/锁库存",
      "status": "禁用",
      "summary": "代理下单、锁库存、自动发货和卡密返回均未开放。"
    },
    {
      "name": "Admin/Internal Key",
      "scope": "后台管理",
      "status": "不公开",
      "summary": "后台或内部凭据不会通过公开页面、客服或代理渠道发放。"
    }
  ],
  "security_controls": [
    {
      "item": "最小权限",
      "status": "设计要求",
      "summary": "将来按目录读取、订单、Webhook 等分开授权，不使用一把全能钥匙。"
    },
    {
      "item": "IP Allowlist",
      "status": "未启用",
      "summary": "正式密钥发放前会要求固定服务器 IP 和回调域名。"
    },
    {
      "item": "Webhook Signature",
      "status": "未启用",
      "summary": "回调需支持时间戳、签名、重放保护和幂等 ID。"
    },
    {
      "item": "Rate Limit",
      "status": "未启用",
      "summary": "正式 API 会限制突发请求、缓存目录读取，避免扫库。"
    },
    {
      "item": "Secret Rotation",
      "status": "未启用",
      "summary": "未来支持密钥轮换、撤销和异常访问停用。"
    },
    {
      "item": "No Card Secret API",
      "status": "禁用",
      "summary": "未正式开售前任何 API 都不返回卡密、密码或交付密文。"
    }
  ],
  "future_application_requirements": [
    "正式公司/团队名称、业务用途和对接负责人",
    "接入域名、服务器 IP、回调 URL 和 HTTPS 状态",
    "计划读取的目录范围、预计请求量和缓存策略",
    "是否需要 Webhook、签名验签、重试和幂等处理",
    "合规用途声明，不接入绕过风控、垃圾信息、诈骗或违规自动化场景",
    "接受站内订单、站内支付和站内售后规则，不接受私下付款"
  ],
  "related": {
    "api_reference": "https://ouacc.cc/api-reference",
    "api_sandbox": "https://ouacc.cc/api-sandbox",
    "catalog_feed": "https://ouacc.cc/catalog-feed",
    "partner": "https://ouacc.cc/partner"
  }
}