Do not post credentials in issues. Revoke an exposed key immediately and contact the repository owner with sanitized details.

The application reads OPENAI_API_KEY, ANTHROPIC_API_KEY, and GEMINI_API_KEY from the environment. Keys must never appear in source code, configuration, output, screenshots, or dashboards.