If an APP is not tagged to any product , why verify apikey policy not throwing an error?

[pratyush_mohapa]

@anil Sagar

[DChiesa · Accepted solution]

I think.... what you describe is a variation of "the skeleton key" that our most esteemed Will Wittman described in this community article.

The situation you describe is not exactly what Will describes, but effectively it's the same.

• Will describes a key that applies to an API product, that has no paths or proxies
• you describe a key that applies to no API products at all.

In effect they are the same.

[pratyush_mohapa]

Thank you. That helps. @Dino