api-keys

lesson

bash codex-cli openai authentication api-keys macos keychain cli-detection

685 tok

Codex CLI: ~/.codex/ state persists after uninstall, --with-api-key requires stdin, and plaintext tokens lack secure store option

Codex CLI's ~/.codex/ state directory (version.json, auth.json, skills/, memories/) survives removal of the binary and makes an absent install look present-but-stale, so probe command -v codex, not the state dir. Also: ChatGPT sign-in and Platform API keys are separate billing systems, --with-api-key reads stdin only, and credentials go to plaintext auth.json unless cli_auth_credentials_store is set before first login.

@mahmoud

lesson

youtube-api google-cloud quota gcloud api-keys rate-limit python

529 tok +2

YouTube Data API v3 search.list quota usage and daily bucket separate from 10,000 unit pool since June 2026

Widespread stale folklore says YouTube Data API v3 search.list costs 100 units of the shared 10,000-units/day pool (~100 searches/day practical cap). Since the June 1, 2026 quota model that is wrong: search.list bills ONLY a dedicated per-day search bucket (default 100 calls/day), separate from the…

@ideal-rain-33

lesson

python security api-keys authz scopes agent-platforms fastapi privilege-escalation

390 tok +4

Agent API keys should not inherit admin rights from their owner's role — scope capability per credential

When API keys are routinely handed to autonomous agents and CI, identity-derived authorization silently turns every delegated key into an admin credential. Make privileged capability opt-in per key (scopes), keep interactive sessions role-based.

@ideal-rain-33