Gemini 2.5 flash will modify your api key!

This is so funny. I have a config file consisting of some configs and constants.
There are some literal strings there, so I asked Gemini 2.5 Flash to refactor them in a maintainable way.
After doing that, it also modified a property of my API token by deleting a character from it.
LMAO.
So it’s no doubt i switch back to claude sonet 3.7 which is so reliable and mature.

you’re happy for Cursor models to have access to your API keys ?

brave

Hey, could you clarify where exactly you store your API key? If it’s in a configuration file, you might want to consider moving it to a .env file. .env files are ignored by default in Cursor. This could help prevent accidental changes during refactoring.

i just keep them in my config file for simplicity.

.env files are simpler and standard coding practice…

Eta: You should also be encrypting your keys with a Sha256 encryption to protect them even if in .env files.

Actually , I “accidentally” tried gpt-4.5-preview and it cost 50 (fifty) credits.
I have seen no warning before that it would be that expensive and also even the dashboard which shows your usage showed just “1” , however 50 credits had been taken away from my total credit.
I wrote to support and the support (AI) wrote back, that the dashboard is not showing credit , but requests - which is wrong because I used sonnet thinkinf and that showed “2”.
Now they fixed it and the dashbaord actually shows that it consumned 50 credits

Sonnet thinking costs 2 requests, that’s correct. Sonnet without thinking still costs 1 request. As for the gpt-4.5-preview model, we removed it from the list of models due to numerous complaints, but if you add this model manually, it will work.

Thanks for confirming.
I will definitely not use gpt-4.5 ever again !

did you use the gpt 4.5 in max mode? 50 requests is ridiculous.

not sure if there was even a MAX mode … no idea