Keeping AI provider keys secure

AI Streams use API keys from your own video provider account. Treat those keys like passwords: they can spend provider credit and should never be shared in a prompt, overlay, support screenshot or public repository.

Good key hygiene

• Create a key with the smallest permissions the provider offers.
• Give each workspace or project its own key where practical.
• Store it only under AI Streams → Provider keys.
• Rotate it at the provider if you think it has been exposed.
• Remove old keys from Stream Repeater after replacing them.

Stream Repeater stores provider keys encrypted and shows only a short identifier after saving. Support will never need the complete key. If a provider reports unusual usage, revoke the key in the provider dashboard first, then replace it here.

Changing or removing a key does not delete existing Video Library recordings. It does stop that AI Stream from requesting more clips once its current queue has been used.