API Key

An API key is typically a string of characters issued by a service provider and included with API requests to identify the requesting application or user. Depending on the service, it may also control which resources can be accessed, enforce usage limits, and support monitoring or billing.

API keys provide a basic layer of access control for services and applications. If exposed through source code, logs, prompts, or AI-generated responses, an attacker may use them to access protected services, consume resources, or access sensitive data. They should therefore be stored and handled securely.