OpenAI API Key Leaked

Support
1

Description

Server Setup Information

  • Weaviate Server Version:
  • Deployment Method:
  • Multi Node? Number of Running Nodes:
  • Client Language and Version:
  • Multitenancy?:

Any additional Information

I just got a note that my OpenAI API key was leaked. As I use OpenAI for embedding as well as text-2vec, where do I go to enter the new key in Weaviate. Thanks!

2

hi @SomebodySysop !!

There are two places that you can pass your API Keys to Weaviate.

  1. At the client instantiation, as header:
# Recommended: save sensitive data as environment variables
openai_key = os.getenv("OPENAI_APIKEY")
headers = {
    "X-OpenAI-Api-Key": openai_key,
}

or at the server level, providing the environment variable OPENAI_APIKEY

Let me know if that helps!

Thanks!

1 Like
3

So the openai key is not stored anywhere in weaviate, but always sent dynamically with every query/embed request?

4

That’s correct. It is not stored in Weaviate itself.