Cursor can see my API Key but how?

It’s an openai API Key in a .env file also in gitignore. The composer in Cursor said it can see it in my message, mentioning an “<open_file> tags”. I have no idea what it is about and how to prevent it. Thanks for tips and support.

1 Like

Probably related to What happened to defaultNoContext? - #4 by leite08

1 Like

Hey,

It’s possible the Composer can see the file if you have it open, either as the focused or a background tab. If it is in your .gitignore, you can be sure it is not in you codebase index, and is therefore not stored or referenced anywhere off your device.

I believe we are looking at some improvements around this to avoid ignored files being added as context in the chat and composer.

1 Like

Hey Dan, thanks. It makes sense.