Scalable API with Secure Access Control & Usage Monitoring

Create and construct a RESTful API with the following capabilities that is suitable for production:

1. Rate Restrictions:
   • Use the proper error responses and retry headers to enforce per-user/API-key request limits (e.g., requests per minute/hour).
2. Key Management for APIs:
   • Create, save, and verify API keys safely
   • Encourage key revocation and rotation
   • Link specific users or apps to API keys.
3. Analytics for usage:
   • Monitor metrics related to API usage, including request volume, accessed endpoints, and response times.
   • Offer reporting features through endpoints or dashboards.
   • Turn on logging for auditing and monitoring.
4. Extra Conditions:
   • Employ security best practices (input validation, encryption, and authentication).
   • Assure performance optimization and scalability
   • Add comprehensive API documentation (such as OpenAPI/Swagger).
   • Offer sample requests or responses, as well as example endpoints.

Provide clear, organized code, setup guidelines, and justifications for important design choices.