Guides
Keep your AI agent to yourself
Plain-English fixes for the ways AI agents most often leak access or money.
How to tell if your MCP server is open to strangers
Many MCP servers answer anyone who knows their address. Here's how to check yours, why it matters, and how to put a login in front of it.
What to do if your OpenAI, Anthropic or other AI key leaked
An AI API key in your site's code or a public repo can be copied and used to run up your bill. Here's what to do in the first hour, and how to stop it happening again.
How to stop strangers running up your AI bill
If your chat or agent route answers anyone with no login, strangers can use your AI credits for free. Here are the checks and limits that keep your bill under control.