AmarEvents has three API key types stored in the api_keys table: User keys (60 requests/hour) — read access to events and own tickets. Organizer keys (120 requests/hour) — write/delete access to events, tickets, organizations, and donations. Admin keys (300 requests/hour) — full platform access including user management. Rate limits are enforced via a sliding-window counter in api_rate_limits using key_id and time window.