API key
A shared secret used to identify or authorize API access.
What API key does not show
It usually identifies an application rather than a person and should not be embedded in public client code.
Where API key comes up on this site
- Our AI accuracy check ran for six days and measured nothingGoogle had changed the rule: a key used for Gemini now has to be an auth key bound to a service account, and the ordinary API key the project had used since September could no longer be granted the Gemini service.
Related terms in Security and privacy
Where an agent, a tool or a page can be turned against its operator, and the controls that limit the damage without proving safety.
X-Frame-Options · frame-ancestors · Referrer-Policy · Permissions-Policy · Encrypted Client Hello · lookalike domain · homoglyph · incident switch · high-risk field · Indirect prompt injection · Direct prompt injection · Jailbreak · Data exfiltration · Sensitive information disclosure · Secret leakage · Insecure output handling · Excessive agency · Least privilege · Trust boundary · Input validation · Output validation · Allowlist · Denylist · SSRF · RCE · Credential scope · OAuth scope · Bearer token · mTLS · Rate-limit policy · Audit log · PII · Data minimization · Purpose limitation · Retention period · Data residency · Tenant isolation · Threat model · DMARC · DMARC alignment · SPF · DKIM · MTA-STS · TLS-RPT · CAA record · DNSSEC · hard bounce
Questions about API key
What is API key?
A shared secret used to identify or authorize API access.
What does API key not show or guarantee?
It usually identifies an application rather than a person and should not be embedded in public client code.
Which area of the glossary does API key belong to?
Security and privacy: Where an agent, a tool or a page can be turned against its operator, and the controls that limit the damage without proving safety.
← OAuth scope · Bearer token →
See it in the full glossary · 772 terms across 19 areas.
Free browser extension
See this on any site you visit, in one click.
CrawlCheck for Chrome grades every site you visit A–F and shows, from your own browser, what search engines and AI assistants are actually served. Free, no account.