is there a way to use openai without storing the api key in the marimo.toml in plain text?

Question

i am using a shared server to run the notebooks on, and don't like the idea of having api keys stored on plain text in files accessible by all.
so i wondered, is there a way to use openai without storing the api key in the marimo.toml in plain text?

Myles Scolnick · Answer

you could set up a proxy server that just forwards requests to API and adds your api key.and then change the base url to point to that server.thats what we do on https://marimo.app/

ruslanoid · Answer

interesting. do you have an example to point to maybe?

Myles Scolnick · Answer

example of a proxy server? not on hand, since its in a larger repo. what language are you looking for it?

ruslanoid · Answer

so basically i can just drop the key from the configuration and use it like so:[ai.open_ai]
# api_key = "sk-proj-..."
model = "gpt-4-turbo"
base_url = "http://my-own-endpoint/"and have some simple let's say FastAPI endpoint forwarding the requests with my key in them?think that might workty

Myles Scolnick · Answer

Yea exactly. You might need to stub the key as well (and then replace it in the proxy server)

Get help from the marimo community

is there a way to use openai without storing the api key in the marimo.toml in plain text?