API Keys

--

API Keys

Encrypted storage for Anthropic, Gemini, Resend, and Twilio credentials. Keys are AES-256-GCM encrypted at rest.

Service status:
Claude (Anthropic)
Gemini (Google)
Resend (Email)
Twilio (SMS)
Loading keys…
Key Storage
Keys are stored securely in the database. Delete and re-add any key showing ⚠ Re-save.
Storage Format
Keys are stored in the database using a session-safe format. If a key shows ⚠ Re-save it was saved in an older format — delete it and add it again to fix.
Fix "Decrypt Failed" Errors
1. Click the 🗑 delete button on the broken key record
2. Click + Add Another and paste your key again
3. Hit Test Live to verify it works
Environment Variable Fallbacks (localStorage)
These plain-text fallbacks are used only if no encrypted DB record exists. Prefer the encrypted DB records above for production use.
How It Works
🔐 Storage
Keys are stored in the database and accessed only on this device. Only the masked preview is shown in the UI — the full key is never displayed after saving.
🔑 Resolution Order
1. Location-specific DB record → 2. Global DB record → 3. localStorage env fallback → 4. Error (key not configured).
🧪 Live Testing
The Test button makes a minimal live API call (Anthropic: 1-token message; Gemini: list models; Resend: list domains) to verify validity without burning quota.