OpenAI

Security and API Key Safety

Assign API Key PermissionsSet and manage API key permissions, including full access, restricted access, and read-only access.
Best Practices for API Key SafetyProtect your API keys with secure storage, access controls, monitoring, rotation, and IP restrictions.
Can I share my API key with my teammate/coworker?Learn why it’s best to keep API keys private and how to securely give your team access.
How can I view the users or organizations associated with an API key?Identify the user and organizations associated with an OpenAI API key by calling the account information endpoint.
How to Incorporate a Safety IdentifierAdd a safety identifier to OpenAI API requests so abuse signals can be linked to users without sharing identifying information.
How to Report Security Vulnerabilities to OpenAIOur policy and guidelines for testing and disclosure