Safety and use recommendations

Protect API Key

API Key is equivalent to the key to the account assets. Please avoid placing it in:

• Open the Git warehouse.
• Screenshots, screenshots, and public documents.
• Message from customer service chats or Group chats.
• In the screenshot of the client configuration tutorial.

If the leak is confirmed, please delete the old Key immediately and create it again.

Reasonable use rights restrictions

In team or multi-device scenarios, you can create different API keys for different purposes:

• Local development Key.
• Server deployment Key.
• Interim test Key.
• Specify the model or specify the restricted Key for the IP.

This way, even if there is a problem with a Key, it can be quickly located and revoked.

Do minimum verification first

After completing the configuration, first send a short question to confirm that it can return normally, and then make a long-context or high-cost call.

你好，请用一句话回复。

Pay attention to usage records

PuLu AI supports viewing request records, tokens and deductions. When encountering abnormal balance consumption, it is recommended to first check the recent request record to confirm whether there are duplicate requests, long contexts, or automatic client retries.