# Key Authentication Plugin

**URL:** <https://discuss.konghq.com/t/key-authentication-plugin/37>\
**Category:** Questions\
**Created:** [November 27, 2017, 11:46pm UTC](https://discuss.konghq.com/t/key-authentication-plugin/37 "2017-11-27T23:46:56Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![CaesarKing](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/caesarking/32/36_2.png) [@CaesarKing](https://discuss.konghq.com/u/CaesarKing)\
**Post date:** [November 27, 2017, 11:46pm UTC](https://discuss.konghq.com/t/key-authentication-plugin/37/1 "2017-11-27T23:46:56Z")

</div>

The Key Authentication plugin adds an API key to your APIs. Consumers then add their key either in a querystring parameter or a header to authenticate their requests. It’s currently stable and works with Kong CE and Kong EE. Give it a try and discuss it here!

[Key Authentication plugin documentation](https://getkong.org/plugins/key-authentication/)

---

<div class="post-metadata">

**Author:** ![danaspice](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/danaspice/32/2542_2.png) [@danaspice](https://discuss.konghq.com/u/danaspice)\
**Post date:** [April 27, 2021, 11:43am UTC](https://discuss.konghq.com/t/key-authentication-plugin/37/2 "2021-04-27T11:43:34Z")

</div>

Does a consumer’s apikey allow them access to any route/service in the workspace, or can you limit to specific routes? Example: consumer A can access route 1 and route 2, consumer B can only access route 1.