API and API keys
An API is an interface programs use to call each other; an API key is the credential shown with each call — whoever has it can use it.
Think of it like this
An API is a bank counter; the API key is your access card. Lose the card and someone else can do business in your name.
In this setup
Your CLIProxyAPI has two "cards": the API Key that AI tools use to call the API, and the management center login key you use to log in to the admin page. Both are in the login-info file — never post them, screenshot them or upload them to GitHub.
Common misconceptions
- "Keys in code are fine because the repo is private": private repos get made public by mistake; keep keys in environment variables or a local config file.
Related: CLIProxyAPI