Practice
Keys, retention, context: the parts that bite in production.
-
Zero data retention, provider by provider
No provider gives you zero retention by default. OpenAI keeps requests for 30 days for abuse monitoring, and every ZDR arrangement excludes whole endpoints.
-
Context window best practices
A larger window is not a better one. Models get less reliable as input grows, and every token in the window is billed on every turn.
-
Where API keys leak, and what actually catches it
GitGuardian found 24,008 secrets in public MCP config files and confirmed 2,117 of them valid. A key that reached a commit is compromised even after you delete the commit.