AI KEY SECURITY CONSOLE
Know whose AI key it is, and whether they still work here.
STX.BOT checks every OpenAI and Anthropic key against your team, flags keys owned by people who left, and sends you a weekly all-clear.
Read-only checks. Admin key encrypted and masked. No card.
We list keys and read spend, never show full keys — everything is masked as sk-…abcd, and require typed confirmation to deactivate a key.
Sample data · 12 keys · 10 at risk
Why teams running agents need this
Orphaned keys
Created for a hackathon or by someone who left, and still live.
Runaway agent bills
One looping agent can burn a month's budget overnight.
No weekly proof
Nobody can say, each Monday, that every key still has an owner on the team.
When a provider revokes keys
- See which keys were removed and when.
- Filter keys by creation time so replacements are not confused with originals.
- Know where each key is used so redeploys are quick.
Built for teams running agents
- See every key in one table
- Kill an eligible key with typed confirmation and an audit trail
- Spend spikes explained in plain English
- Rotation evidence ready to export
What it does
Discover
Pull every key from OpenAI and Anthropic admin APIs — owner, project, last used, age.
Match
Check every key owner against your team roster. Keys owned by people who left are flagged, with a one-step review to shut them off.
Report
A weekly all-clear every Monday: keys checked, owners verified, spend against budget and anything that needs you.
Rotation evidence
Guided key replacement with rotation tracking and an exportable audit trail.
How it works
- 01Paste an admin key for OpenAI or Anthropic.
- 02We sync every key and 30 days of spend.
- 03Set rotation policies and review alerts.
Security by default
Encrypted at rest
Admin keys live in an encrypted vault and are only read server-side.
Read-only by default
Destructive actions require a typed confirmation and are audit-logged.
Never shows full keys
Everything is masked as sk-…abcd. Always.
Your agents, on a short leash.
See which AI agent holds which key, cap what it can spend, and cut it off in one click, with proof.
Grant
Know who has what. Tag every key with the agent that uses it, its owner and purpose.
Limit
Monthly spend ceilings with 80% and 100% alerts, plus access that expires.
Revoke
Cut off an agent's keys in one click. Every result is confirmed by the provider and logged.
Pricing
Free Audit and Starter are available now. Growth is coming soon.
Free AI Key Audit
See your exposure in 60 seconds.
$0
- One-time scan of OpenAI or Anthropic
- Exposure score with your top 3 fixes
- Inventory of every key, with stale keys flagged
- Orphaned-key detection
- No card required
We list keys and read spend, never show full keys — everything is masked as sk-…abcd, and require typed confirmation to deactivate a key.
Starter
RecommendedEvery AI key, watched and under control.
$99/month
Founding members lock in $79/month for their first 12 months.
- OpenAI + Anthropic, up to 50 keys
- Exposure score and top fixes, always current
- Owner tracking
- Keys of departed owners flagged
- Kill switch: deactivate a risky key in one confirm
- Plain-English spend spike alerts and per-project budgets
- Rotation tracking with evidence export (CSV)
- Slack + email alertsComing soon
Growth
Hands-off rotation across every cloud.
$299/month
- Everything in Starter
- AWS Bedrock, Azure OpenAI and Google CloudComing soon
- Automatic key rotation where providers allow itComing soon
- Hourly checks and unlimited keysComing soon
- SOC 2 evidence packComing soon
Annual billing and custom Enterprise plans available at launch. Questions? steve@stx.ai
FAQ
Join the waitlist
Get notified when Growth becomes available.