20. Security Recommendations#

• Store keys carefully: once a key leaks, anyone can use it to burn your quota. Revoke it immediately on disclosure.
• Enable the IP allowlist: if your servers have fixed egress IPs, configure an allowlist for the key to further shrink the attack surface.
• Least privilege: assign a different key to each application instead of reusing one key everywhere.
• Rotate regularly: replace keys periodically to reduce long-term leak risk.
• Never commit keys to repositories: use environment variables or a secrets management service; never write keys into a code repository.