Astra-api

Security

https://17astra.com/v1

Protect your account

Sign in only on https://17astra.com. Keep administrator credentials separate from customer tokens. Use a separate token for each application, with a reasonable budget and expiration.

Revoke exposed tokens immediately, update affected applications, and review usage logs. Never put keys in public repositories, browser-side code, support screenshots or chat messages.

Requests and service boundaries

Consider the sensitivity of data before sending it to an AI model. Usage records may include timestamps, model IDs, token counts and error information. This page does not assert zero retention, independent security certification or uninterrupted availability.

Report security issues privately to the site administrator with minimal, redacted evidence. Do not access another user's data or perform intrusive testing without authorization.