Home / Passwords & API keys / API keys, one company at a time
API keys, one company at a time
Each page here walks through one company's website: where to click, which key to copy, and where to put it.
The steps are the same every time:
- Create the key on the company's website. Most only show it once, so copy it right away.
- Paste it into your
.envfile. See Env files if you don't have one yet. - If your project is on the internet, add the same name and key in your Vercel settings.
- Tell your AI helper the key's name (like
OPENAI_API_KEY), never the key itself.
- company website
- your .env file (and Vercel)
- your project uses it
Only open the one your project asks for:
- Claude: if Claude Code asked you for an API key, or your project uses Claude
- OpenAI or Gemini: if your project uses ChatGPT's or Google's AI
- GitHub token: if GitHub asked for a password when saving
- Stripe: if your project takes payments
- Coinbase: if your project checks crypto prices or your account
- Discord: if you're building a Discord bot
8 pages
- Claude API keyconsole.anthropic.com, a key that starts with sk-ant-, then ANTHROPIC_API_KEY in .env. Pro is not this.
- GitHub personal access tokenFine-grained PAT from Settings → Developer settings. Use it as the git password. Never commit it.
- OpenAI API keyplatform.openai.com, not chatgpt.com. Plus is not API access. OPENAI_API_KEY in .env.
- Gemini API keyGoogle AI Studio, one key, GEMINI_API_KEY in .env. Not a Cloud billing saga unless you outgrow Studio.
- Coinbase API keyCDP for an app you own. Advanced Trade only if you need your account. Secret shown once. Never trade permission for a first bot.
- Stripe API keyspk_ vs sk_, test vs live. Secret stays off NEXT_PUBLIC_. Same names in .env and Vercel.
- Stripe webhook secretA signing secret that starts with whsec_. Local CLI is not the Vercel endpoint. Separate from sk_.
- Discord bot tokenDeveloper portal → application → Bot → Reset token. DISCORD_BOT_TOKEN in .env. Not the application ID.
Get new guides and videos by email
One email when something new is up. No spam. Unsubscribe anytime.