What's an API key, really (explained without jargon)

Everyone says 'just paste your API key.' Nobody explains what the key actually is. Here's the plain-English version for authors — what they do, where they come from, and why yours is private.

·7 min read·Chelle Honiker
Flat illustration of a key hovering above a small locked door with abstract data flow behind it

Every AI setup guide for authors has the same step: "Paste your OpenAI API key." And every author's first reaction is the same: "my what?"

Here's the plain-English version. No CS degree required.

What an API key actually is

An API key is a long string of random-looking text that identifies you to a service. Like a library card number, but for computer systems instead of books.

When our tool wants to draft a caption for you using OpenAI's models, it has to prove to OpenAI that the request is authorized and that OpenAI should charge someone for it. Your API key is that proof of identity.

A typical key looks like this:

sk-proj-abc123def456ghi789jkl...

That's nonsense to you; it's a unique identifier to the service. When our tool makes a request to OpenAI, it attaches your key, OpenAI checks the key against its database, and either:

  • Runs the request and bills your OpenAI account, or
  • Rejects the request because the key is invalid, expired, or you've hit your spending limit.

Why "API" is an intimidating word

API stands for Application Programming Interface. That phrase is terrible marketing. What it actually means:

An API is the way one piece of software talks to another piece of software.

When you open the Instagram app and scroll, your phone is quietly talking to Instagram's servers through Instagram's API — requesting the latest posts, loading the images, posting your like. You don't see any of that; it's the machinery behind the scene.

When our tool drafts a caption for you, it's using OpenAI's API — the machinery that lets one piece of software (us) ask another piece of software (OpenAI's models) to do something.

An API key is just the identity badge that lets you use the machinery.

Why you have to bring the key (instead of us hiding it)

Fair question. You might expect a paid tool like this one to handle all the AI stuff silently — you pay us, we pay OpenAI, no key-pasting required.

Two reasons we don't:

1. You pay cost, not markup. Most tools that bundle AI charge you 3-10× what they pay. We don't. $29/month covers the tool; your AI costs go directly to OpenAI or Claude or Gemini at their prices. Most authors run $5-15/month on AI. If we bundled, you'd probably pay $50-$100/month.

2. You stay in control. Your AI key lives in your OpenAI account. If we disappeared tomorrow, your relationship with OpenAI is unaffected. You're not locked into paying us to keep using AI.

Bring-your-own-key (BYOK) is the honest version of AI pricing for indie authors.

Where you get an API key

Every AI service has its own "API keys" section in the user dashboard. For the three main providers:

OpenAI (ChatGPT)

  1. Go to platform.openai.com
  2. Sign in (use your existing ChatGPT account if you have one — same login)
  3. Click your profile icon → API keys
  4. Click Create new secret key
  5. Give it a name like "Author Automations Social"
  6. Copy the key (starts with sk-...)
  7. Paste into Settings → AI → OpenAI key

Anthropic (Claude)

  1. Go to console.anthropic.com
  2. Sign in
  3. Click API Keys in the sidebar
  4. Click Create Key
  5. Name it, copy it (starts with sk-ant-...)
  6. Paste into Settings → AI → Anthropic key

Google (Gemini)

  1. Go to aistudio.google.com/apikey
  2. Sign in with your Google account
  3. Click Create API key
  4. Copy the key
  5. Paste into Settings → AI → Gemini key

You only need one of the three to use AI. You can add all three and switch between them in Settings. We pick a sensible default; you override it if you have a preference.

Each provider has a free tier (small monthly credit) so you can test without billing your card immediately.

Why the key is private

If someone else gets your API key, they can use it to make requests — billed to your account.

OpenAI, Anthropic, and Google all have spending limits you can set (and defaults that stop runaway usage), but the basic rule is the same as a credit card number: don't paste it into random places, don't post it publicly, don't email it to anyone.

Inside Author Automations Social:

  • Your key is encrypted at rest (stored in a format nobody — including us — can read without your account's decryption key)
  • Your key is decrypted only at the moment of use (when AI is actively generating something for you, the tool briefly reads the key to make the API call, then clears it from memory)
  • Your key is never logged, never shown in error messages, never visible once saved (you'll see sk-...xxxx1234 in Settings — just enough to confirm which key is active)

If you ever need to rotate the key (which is good practice every few months anyway), you:

  1. Go to the provider's dashboard
  2. Delete the old key and generate a new one
  3. Paste the new key into Settings
  4. The old key is now dead; nothing can use it even if leaked

What spending limits to set

This is the single most important thing most authors skip. Each AI provider lets you set a monthly spending cap so a bug or runaway loop can't drain your account.

OpenAI: platform.openai.com → Billing → Usage limits. Set Hard limit to $15-25/month for most authors. You'll get an email at 75% of the cap and the API will stop responding at 100%.

Anthropic: console.anthropic.com → Plans & Billing → Usage. Set a monthly spending cap similarly.

Google Gemini: Generous free tier; most authors never hit paid usage. Still worth setting a cap at your Google Cloud billing dashboard.

Setting these caps is the peace-of-mind step. Even if something on our side went wrong and made a million requests (it won't), your account stops at the cap and you're out at most $15.

Common API key questions

Q: Can I use the same key for ChatGPT and Author Automations?

Sort of. ChatGPT (the consumer product at chat.openai.com) uses a subscription, not an API key. Your ChatGPT Plus subscription doesn't cover API usage. You need to separately set up API access at platform.openai.com, which has its own billing.

Most authors have both: a $20/month ChatGPT Plus for their own chatting, and a separate API-billing account for tools that integrate (ours, Poe, Custom GPTs, etc.).

Q: Do I have to use OpenAI? I don't like them.

No. Claude (Anthropic) and Gemini (Google) both work fine for caption generation. Pick whichever provider you prefer.

Q: Can I switch providers mid-campaign?

Yes, but it will feel different. Each model has a slightly different voice, even with the same brand voice guides. Switching mid-launch is visible; switching between launches is fine.

Q: What happens if my key expires?

Our tool detects the 401 (unauthorized) response from the provider and surfaces a clear error in the dashboard. You regenerate the key in the provider's dashboard, paste the new one, and you're back.

Q: Are my prompts stored?

Only at the provider's end, per their privacy policy. OpenAI and Anthropic both have zero-retention options for API usage (data not used for model training); worth enabling in their dashboards if that's a concern.

What to do next