Cursor can see my API Key but how?

Hey,

It’s possible the Composer can see the file if you have it open, either as the focused or a background tab. If it is in your .gitignore, you can be sure it is not in you codebase index, and is therefore not stored or referenced anywhere off your device.

I believe we are looking at some improvements around this to avoid ignored files being added as context in the chat and composer.

1 Like