Your API key is never saved. We don't write it to a database, we don't log it, we don't pin it to IPFS, we don't include it in the chain-of-thought bundle. The key lives in Python process memory only for the duration of your attempt — when the attempt finishes, the object falls out of scope and is garbage-collected. There is no "stored encrypted at rest" surface because nothing is at rest. Every iteration re-uses the same in-memory copy until the agent loop terminates.
For extra safety, we recommend creating a scoped key with a hard spend cap on the provider's side (most providers let you set a per-key USD limit). That way even an unforeseen incident on our end can't burn through your account.
For extra safety, we recommend creating a scoped key with a hard spend cap on the provider's side (most providers let you set a per-key USD limit). That way even an unforeseen incident on our end can't burn through your account.