How can I protect my Api Key from getting leaked?

[Accelerate_Hyper (Accelerate)]

I have recently made a plugin that generates Roblox Code using Open Ai but I’m not sure how to protect my Api Key from getting leaked. Any tips or ways that I can use to protect it?

[ThanksRoBama (Emma)]

Just don’t send it to people.

So don’t put it in a LocalScript or any ModuleScript that gets replicated to clients, and don’t send the key through RemoteEvents or RemoteFunctions.

[Accelerate_Hyper (Accelerate)]

@ThanksRoBama

don’t send it to people.

So don’t put it in a LocalScript or any ModuleScript that gets replicated to clients, and don’t send the key through RemoteEvents or

Is that it? do I not have to work with Proxy Urls and stuff?

[ThanksRoBama (Emma)]

The URL might be secret, for example if it contains the API key then you need to do use it securely. AFAIK it shouldn’t be necessary to do anything special if you’re sending over HTTPS but I’ve no idea if HTTPService does that.

[ketrab2004 (ketrab)]

@Accelerate_Hyper

do I not have to work with Proxy Urls and stuff?

You do since you are making a plugin. Everyone who downloads your plugin will get all of its source code, including api key.