It’s an openai API Key in a .env file also in gitignore. The composer in Cursor said it can see it in my message, mentioning an “<open_file> tags”. I have no idea what it is about and how to prevent it. Thanks for tips and support.

Hey, It’s possible the Composer can see the file if you have it open, either as the focused or a background tab. If it is in your .gitignore, you can be sure it is not in you codebase index, and is therefore not stored or referenced anywhere off your device. I believe we are looking at some improv…

Cursor can see my API Key but how?

Support Help

leite08 (Rafael Leite) December 5, 2024, 2:17pm 2

1 Like

What happened to defaultNoContext?

Topic		Replies	Views
Are environment variables used for cursor training? Discussions	4	2047	January 6, 2025
Composer access to .env.local Discussions	10	7881	June 26, 2025
BIG SECURITY RISK! .cursorignore doesn't seem to work, .envs files being sent as context Bug Reports	2	1636	December 13, 2024
Environment Secrets and Code Security Feature Requests	19	6413	March 19, 2025
Cursor reads .env even though it is on .gitignore and .cursorignore Help	2	325	January 14, 2025

Cursor can see my API Key but how?

Related topics