Build with AI / Reference

API Key Safety

AI tools make it easy to leak an API key. Keep it out of prompts and out of the browser.

• Copy this page
  • View as Markdown
• Ask an AI assistant
  • Open in ChatGPT
  • Open in Claude
  • Open in Cursor

Rules

• Never paste a real key into a chat or a prompt. Use YOUR_API_KEY or the name of an environment variable.
• Call Egon from your server. A key sent from the browser is visible to anyone who opens the page.
• Store the key in an environment variable or in your platform's secrets, such as EGON_API_KEY.

Review Generated Code

Before you deploy code written by an AI tool, check that:

• the key is read from a secret, not written in the code;
• no request to Egon starts from the browser;
• responses are checked against the Quality Indicators before the data is used.