What should I do if my API key is exposed?

Last updated: November 3, 2026

  1. Delete the exposed key in the API keys section of the console.

  2. Create a new key.

  3. Update your applications to use the new key.

Check for unauthorized use

Open Settings → Usage, where usage is broken down by API key. If you see usage you don't recognize, submit a support request with your organization ID. Don't include the key itself.

Avoid exposure

Never commit keys to source control or share them in Discord or support emails.