I just checked and you can see all your active keys google org API keys in `https://console.cloud.google.com/apis`. 

Might be a good idea to remove ones you don't use anymore... and put 2FA on your admin account. And not run fucking clawdbot on something that exposes org admin credentials. ~lol

> it's that Google has too permissive a default policy.

It shouldn't be on purpose! ~lol

0xbitcoiner

Exactly. I'm quite sure that every Google billing feature supports both budgeting per function/project/org unit and per-key/user overall call quotas. You have to set these up of course.

I think that the main issue here though isn't in user space; it's that Google has too permissive a default policy.

Dev stunned by $82K Gemini API key bill after theft

Exactly. I'm quite sure that every Google billing feature supports both budgeting per function/project/org unit and per-key/user overall call quotas. You have to set these up of course.

I think that the main issue here though isn't in user space; it's that Google has too permissive a default policy.