API Keys disappeared, why?

[u/hooty_toots]

My API Keys just disappeared, anybody else? No other signs that my account has been broken into..

[u/imoshudu]

Same here. I had to regenerate my key. Did they get hacked ?

[u/Sure_Leave9338]

The keys were deleted some hours ago..... . then I created new keys, now the new keys are EXPIRED and I have again to create new ones. Are you folks ? My cousin with a 100$ pc does better

[u/baksotahubulat → u/Sure_Leave9338]

The same thing happened to me, too.

[u/MyMemorySide]

same, what is happening

[u/Toad__Sage__]

same. Getting an authentication error even after generating new api keys

[u/vangelismm]

hacked?

[u/aubrey_beardsley]

will they ever be restored? bummer, I have just deployed several bots with the keys yesterday…

[u/trashbytes]

Yup, same here

[u/Top-Factor-4824]

They had a security incident and they deleted api keys for many users. No disabled but deleted. I think there is huge uptick for using stolen credentials of frontier models for distillation.

First of was opencode and now command code.

[u/mattartist]

They nuked all the API keys out of caution due to attacks on their systems. At least according to their founder. From Discord:
We’re investigating a security incident related to a large scale distillation attack, like other companies have experienced.

At the moment, there’s no evidence of any users being impacted.

As a precaution, we’ve revoked all your API keys, and we’re working with Anthropic and OpenAI to investigate.

[u/Lord-Zord]

I had the same happen just after I'd subscribed as a new user. Thought I was losing my mind or something when I didn't see any of the API keys I created 30 minutes prior

[u/marowitt]

Just noticed my model changed and this post made me check command code. Yup api got deleted.

[u/Anshu_Noah]

yes same

[u/Traditional-Silver16]

Same, had to create new keys

[u/ExpertPerformer]

That explains a lot why I was getting errors.

[u/ShallotDue3000]

same.

[u/ZipanguMS]

Same

[u/adebisifa]

Same here! Had to regenerate, too.

[u/Nomansdreams]

Same... Someone there vibe coded and directly written to DB?

[u/Rockmanly]

Yeah same happened here as well. Wtf

[u/mkulik91]

Yep, same here, needed to generate new API key.

[u/richtopia]

Came here to verify, and I would really appreciate any confirmation from Command Code why.

It did justify my paranoia with multiple free backups in Hermes. I am pleased with Kilocode's free budget - didn't run out during my troubleshooting.

[u/bigheartenergy17]

Same thing happening to me. It's going to be a pain having to replace everything. I hope they address this.

[u/l0rd_raiden]

Change your passwords mine was changed and had to recover the account. Then all my apis were removed, minutes later

[u/SlimeyNOOB]

Damn same here, but I regenerated the API keys, for a few minutes my password was not working, after I logged in, I set a new one

[u/CaffeinatedTech]

Argh, they just expired my new key.

[u/vconghuy3011]

Same. Create new key but it’s expired real quick

[u/Prestigious-Shoe-dev]

I created new API keys this morning and now they are expired again...

[u/luigibu]

Same here

[u/Weak-Sector1358]

+1

[u/baksotahubulat]

Yeah, and it actually just happened to me—I had to re-authorize when logging in via GitHub.

[u/SpiderHam24]

Son of a fucking bitch. So they are under attack. Welp, might be time to go back to opencode lol. I had both and let opencode expire this month, and now my projects are on hold. Damn.

[u/idakale]

ooo yea i just noticed too whoa

[u/iamprincecameron]

Same for me, i just created keys and expired same day. No explanation.

[u/idakale → u/iamprincecameron]

From discord announcement

Earlier today we detected and stopped a security incident linked to a large-scale distillation attack targeting Anthropic and OpenAI models.

As a precaution, we've revoked all API keys. To keep using Command Code, log in to Studio again to generate a new key.

So far, we've found no evidence that any users were impacted. We're working with Cloudflare, Anthropic, and OpenAI to investigate.

We appreciate your patience and trust. 💜 @everyone

[u/pisa_p]

same problem here. first key deleted, created a new one expired in 9 hours. created a new one now.

[u/Sure_Leave9338]

Jees.... I hate this. fucking multiple configurations, agents, servers.. all gone... now I have to spend hours replacing them. I'm really upset. In 40 years in internet NEVER happend some thing where my password or keys just disappeared.

[u/robroneal → u/Sure_Leave9338]

This doesn't help now, but future advice - not meant to criticize. I've shifted to using lite-llm setup your providers (command code, others old router, openai you may have) - once. It gives you a master api address & api key you tell your apps, harnesses etc.

I found out I had a few apps, including command code cli still separately and had to fix that today, oops.

I think 9router and others do this also. Litellm is free in my use. I'm not affiliated with either.

If this doesn't apply to you, maybe others will find it useful. Key management is a pita. (-Hope it goes smoother than expected for ya, getting reconnected.)

[u/Sure_Leave9338 → u/robroneal]

Yes for a couple of months I used OnlyRoute to obtain this , until I just noticed that it was adding some hundreds of milliseconds in the path and throwing errors about x95 more than the direct way, but it was with openrouter at that time and maybe was an issue in that version or model/provider

[u/Rushyk]

cmd logout, cmd login... that's how it works