Unverified50% confidenceFactExact time
The OpenAI key is stored as a secret on the Docker side; the key is temporarily attached only when the sandbox makes a request, and the key itself never resides inside the sandbox.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/12/2026
First Seen
Valid until: 1/10/2027
Sources
Related Entities
Related Claims
UnverifiedThe llm-keys-ui web interface only displays the names of stored keys (such as anthropic, openai, openrouter, and qwen-dummy); the values of stored keys are never shown.76% similarUnverifiedVendor keys are encrypted at rest using a Fernet master key; the master key is generated at first startup, persisted to a Docker volume, and never leaves the container.76% similarUnverifiedA paid API key system should follow the principle: never store the actual key, only store a hash fingerprint of the key.72% similarUnverifiedAgentboard has a dedicated area for storing keys; agents cannot read the plaintext of keys but can still use them in their work.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1003671API
curl https://kongchang.com/api/v1/knowledge/claims/1003671MCP
get_claim(id=1003671)