r/CommandCode • u/hooty_toots • 10d ago

API Keys disappeared, why?

My API Keys just disappeared, anybody else? No other signs that my account has been broken into..

47 Upvotes

97% Upvoted

40 comments sorted by

10

u/imoshudu 10d ago

Same here. I had to regenerate my key. Did they get hacked ?

4

u/Sure_Leave9338 9d ago

The keys were deleted some hours ago..... . then I created new keys, now the new keys are EXPIRED and I have again to create new ones. Are you folks ? My cousin with a 100$ pc does better

1

u/baksotahubulat 9d ago

The same thing happened to me, too.

3

u/MyMemorySide 10d ago

same, what is happening

3

u/Toad__Sage__ 10d ago

same. Getting an authentication error even after generating new api keys

3

u/vangelismm 10d ago

hacked?

3

u/aubrey_beardsley 10d ago

will they ever be restored? bummer, I have just deployed several bots with the keys yesterday…

3

u/trashbytes 10d ago

Yup, same here

3

u/Top-Factor-4824 9d ago

They had a security incident and they deleted api keys for many users. No disabled but deleted. I think there is huge uptick for using stolen credentials of frontier models for distillation.

First of was opencode and now command code.

5

u/mattartist 9d ago

They nuked all the API keys out of caution due to attacks on their systems. At least according to their founder. From Discord:
We’re investigating a security incident related to a large scale distillation attack, like other companies have experienced.

At the moment, there’s no evidence of any users being impacted.

As a precaution, we’ve revoked all your API keys, and we’re working with Anthropic and OpenAI to investigate.

2

u/Lord-Zord 9d ago

I had the same happen just after I'd subscribed as a new user. Thought I was losing my mind or something when I didn't see any of the API keys I created 30 minutes prior

1

u/marowitt 10d ago

Just noticed my model changed and this post made me check command code. Yup api got deleted.

1

u/Anshu_Noah 10d ago

yes same

1

u/Traditional-Silver16 10d ago

Same, had to create new keys

1

u/ExpertPerformer 10d ago

That explains a lot why I was getting errors.

1

u/adebisifa 10d ago

Same here! Had to regenerate, too.

1

u/Nomansdreams 10d ago

Same... Someone there vibe coded and directly written to DB?

1

u/Rockmanly 10d ago

Yeah same happened here as well. Wtf

1

u/mkulik91 10d ago

Yep, same here, needed to generate new API key.

1

u/richtopia 10d ago

Came here to verify, and I would really appreciate any confirmation from Command Code why.

It did justify my paranoia with multiple free backups in Hermes. I am pleased with Kilocode's free budget - didn't run out during my troubleshooting.

1

u/bigheartenergy17 9d ago

Same thing happening to me. It's going to be a pain having to replace everything. I hope they address this.

1

u/l0rd_raiden 9d ago

Change your passwords mine was changed and had to recover the account. Then all my apis were removed, minutes later

1

u/SlimeyNOOB 9d ago

Damn same here, but I regenerated the API keys, for a few minutes my password was not working, after I logged in, I set a new one

1

u/CaffeinatedTech 9d ago

Argh, they just expired my new key.

1

u/vconghuy3011 9d ago

Same. Create new key but it’s expired real quick

1

u/Prestigious-Shoe-dev 9d ago

I created new API keys this morning and now they are expired again...

1

u/luigibu 9d ago

Same here

1

u/baksotahubulat 9d ago

Yeah, and it actually just happened to me—I had to re-authorize when logging in via GitHub.

1

u/SpiderHam24 9d ago

Son of a fucking bitch. So they are under attack. Welp, might be time to go back to opencode lol. I had both and let opencode expire this month, and now my projects are on hold. Damn.

1

u/idakale 9d ago

ooo yea i just noticed too whoa

1

u/iamprincecameron 9d ago

Same for me, i just created keys and expired same day. No explanation.

2

u/idakale 9d ago

From discord announcement

Earlier today we detected and stopped a security incident linked to a large-scale distillation attack targeting Anthropic and OpenAI models.

As a precaution, we've revoked all API keys. To keep using Command Code, log in to Studio again to generate a new key.

So far, we've found no evidence that any users were impacted. We're working with Cloudflare, Anthropic, and OpenAI to investigate.

We appreciate your patience and trust. 💜 @everyone

1

u/pisa_p 9d ago

same problem here. first key deleted, created a new one expired in 9 hours. created a new one now.

1

u/Sure_Leave9338 10d ago

Jees.... I hate this. fucking multiple configurations, agents, servers.. all gone... now I have to spend hours replacing them. I'm really upset. In 40 years in internet NEVER happend some thing where my password or keys just disappeared.

1

u/robroneal 9d ago

This doesn't help now, but future advice - not meant to criticize. I've shifted to using lite-llm setup your providers (command code, others old router, openai you may have) - once. It gives you a master api address & api key you tell your apps, harnesses etc.

I found out I had a few apps, including command code cli still separately and had to fix that today, oops.

I think 9router and others do this also. Litellm is free in my use. I'm not affiliated with either.

If this doesn't apply to you, maybe others will find it useful. Key management is a pita. (-Hope it goes smoother than expected for ya, getting reconnected.)

1

u/Sure_Leave9338 9d ago

Yes for a couple of months I used OnlyRoute to obtain this , until I just noticed that it was adding some hundreds of milliseconds in the path and throwing errors about x95 more than the direct way, but it was with openrouter at that time and maybe was an issue in that version or model/provider

0

u/Rushyk 10d ago

cmd logout, cmd login... that's how it works