I gave my agent my API key and lost $100
He installed the AI and connected OpenRouter, and thought the agent was just expensive to run. Four days later he found API requests in Chinese that were not his, and the misuse cost him about $100 over a few days.
$100at stake
This one went wrong. Read what happened so you don’t hit the same problem.
How it works
- He installs the AI and connects OpenRouter with his API key
- He assumes the agent is just expensive to run
- Four days later he finds requests in Chinese that are not his
- The misuse costs him about $100 over a few days
Why it’s worth knowing
The cost was not his agent being pricey. Requests that were not his were running through his key, and he only spotted it days later.
Where it’s from
Summarized from a public post on bsky.app. See the original ↗