lolcreds

Public credential defaults and exposure patterns for authorized security testing.

OpenAI

OpenAIAI API1 credential

Credentials1 documented
01

API Key

openai / api-key

OpenAI API keys authenticate requests to the OpenAI API. OpenAI's quickstart instructs users to create an API key, store it securely, and export it as OPENAI_API_KEY for SDK and CLI use.

user definedsecretAPI key

Looks like

example
example

OpenAI project-scoped API key form

sk-proj-ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRST
example

OpenAI service-account API key form

sk-svcacct-ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789
example

Legacy OpenAI API key form; public scanner rules often include T3BlbkFJ context

sk-ABCDEFGHIJKLMNOPQRSTT3BlbkFJabcdefghijklmnopqrst

Location

environment
OPENAI_API_KEY
http header
Authorization

Bearer token used by OpenAI API calls

source code

application config, examples, notebooks, CLI scripts, committed .env files

config file
openai.yaml, openai.json, litellm.yaml, config.yaml, mcp.json, claude_desktop_config.json

OpenAI-specific app/gateway/MCP config files

secret store

CI/CD variables, cloud secret managers, platform environment stores

logs

request dumps or debug logs that include Authorization headers

Notes

OpenAI API keys are bearer credentials. Treat exposure according to the project, organization, and permissions attached to the key, and rotate any key that appears in source code, logs, notebooks, or shared deployment configuration.

Scope

Authorized use

LOLCreds helps map the credential surface of real products: known defaults, generated values, credential locations, and exposure patterns.