criticalopenai-legacy-key· OpenAI-compatible

OpenAI-compatible API key

Billable API access to whichever provider issued it.

How it is detected

Matches the older `sk-` format. Named "OpenAI-compatible" rather than "OpenAI" on purpose: DeepSeek, Groq, Together, Fireworks and most OpenAI-compatible gateways issue keys in this exact shape, and the string carries nothing that identifies which one.

If you find one

1Revoke the credential with its provider. Rotation is the only fix — the key is in the browser cache, in CDN edge nodes, and in whatever scraped the page.
2Review the account for activity you did not initiate.
3Move the call that needed it to a server route, so the browser never receives the replacement.

https://platform.openai.com/api-keys →

Where it turns up

Most often in client bundles built by AI coding tools.