Learning Lab
Safetybeginner 12 min

Use API keys without surprises

API access unlocks direct model choice and transparent usage, but a leaked key can create charges. Learn the safe lifecycle: create, restrict, store, monitor, rotate, and revoke.

0 of 3 observations0%

Choose a provider for a real reason

Start with the capability you need—text, coding, image understanding, image creation, speech, or low-cost experimentation—then select a provider.

Review provider links

Store the secret in Settings

Never paste a key into chat, source code, screenshots, or lesson content. MaiaChat masks stored keys and validates them without returning the complete secret.

Open API key settings

Monitor and rotate

Review provider billing and MaiaChat cost records. Revoke a key immediately if it appears in a prompt, log, screenshot, repository, or shared document.

Review usage costs

Finish with an honest check

Complete the lesson only when you performed or deliberately inspected each observation—not simply because you read the page.