Do not open a public issue for a security problem. Contact support through Telegram and describe the issue without including your full API key.

Include:

• the affected page or repo file;
• steps to reproduce;
• impact;
• a safe way to contact you.

Never commit:

• API keys (sk-...);
• account credentials;
• cookies;
• tokens from 7API or any model provider.

If a key is exposed, rotate it immediately in the 7API dashboard.

This repository is documentation. Security issues in the 7API service itself should be reported through the support channel, not through this repo.