What should an AI agent see instead of a real email-service API key?
Provide the expected environment variable name, a fake example value, and setup instructions. The agent can implement configuration handling without seeing the actual credential.
Explore This Question
Search for additional explanations using these tools:
More FAQs in Why must API keys and access tokens remain outside the Git repository?
No. Repository access, clones, automation, and future sharing create additional exposure paths. Keep the token in protected configuration and commit only the variable name.
No. Earlier history or external copies may retain it. Revoke or rotate the token at its service, then coordinate any necessary repository cleanup.
Still have questions?
Browse all our FAQs or reach out to our support team