API · 40 min

Secrets stay server-side

  • Keep XAI_API_KEY out of git, the browser, and this LMS
  • Know how to rotate a leaked key

A seat is required to open the full lesson, save progress, and mark complete. Practice happens on Grok (SuperGrok recommended). This desk is not a graded certificate.

The common “hello world” on the internet pastes the key into a React file “just to see it work.” That file is then committed, or deployed, or copied into a lesson artifact. Bots harvest `xai-` and `sk-` strings from GitHub in minutes.

Get a seatLog inRedeem a code