I uploaded a zip that contains passwords or API keys. What should I do?
- Rotate the secrets in the zip (passwords, tokens, keys). This matters most.
- Check visibility: make sure the file isn't public. If it was, assume it was seen.
- Delete the object with
DELETE /v1/buckets/{bucket_id}/objects/{object_id}. - Backups: a backup taken while it was stored can bring it back on restore. Delete or replace that backup.
- Preview: the unpacked tree may still show it until the next zip is uploaded. Upload a clean zip.
- For permanent deletion help, email infrastructure@clatterlabs.xyz.
Learn more#
Related articles
- How should I store my API key and Account ID in my code?Cosmos Agent API
- Can I put passwords or API tokens in my instructions?Cosmos Agent API
- Someone left our company. What should we do about Agent API keys?Cosmos Agent API
- Should I use the Console or the API for Code Buckets?
- How do I upload a zip with the API?
Still need help?
Tried the steps above and still stuck? Email us. We usually reply within the first hour, and always within 24 hours. A full support team is with you.
Infrastructure questions, or permanent deletion of your data
infrastructure@clatterlabs.xyzFor deleting your whole account or the data of one service.